, 0x4)
timerfd_create(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
sendto$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

19:17:08 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

19:17:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3, 0x5, 0x6, 0x10000, 0x35dd})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x400452c8, 0x400068)
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x40000000)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000240))
accept4(r3, &(0x7f0000000180)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0)

[  415.180782][T11124] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure
19:17:08 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4)

[  415.328141][T11124] IPVS: ftp: loaded support on port[0] = 21
[  415.364594][T11092] IPVS: ftp: loaded support on port[0] = 21
[  415.574508][T11091] netlink: 'syz-executor.1': attribute type 13 has an invalid length.
[  415.640694][T11131] netlink: 'syz-executor.1': attribute type 13 has an invalid length.
[  415.664092][T10273] tipc: TX() has been purged, node left!
19:17:09 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000001c0))

19:17:09 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KDSKBLED(r2, 0x4b65, 0x8000)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}, {&(0x7f00000000c0)="19fdbb738aa5514292f9218b25c9800d4c722d76982b8b06e1fd0373603bc1ac91c0292c2fbb4ad4ff40263651a2fb22647c6679b044e1245437887d303bba0548181b908382e2088dfde736da7b270d36bc20cde8db71d8fd385e7d2b08ce9b758ac247e4c963c3949afd33be5d5e9a682fd1f402fc9859793f123e3dd652e3181e7324395f6bf2495a8ed8887bc05b9b5a220143042f7e6efb0529548ab1139882a6e6a880d099059acf087cda3e2a956cdd1ab78268", 0xb7}, {&(0x7f0000000180)="7fa49235e384ada0204bfc28a346b278e6933e193bfaeb682f7fdc0651d75e7ef5bf57f382f33427606137654203b3200cc3b2fac7773c6461ba7cbd69171085067a60b7822fe1fff6d80beaad00523529537d83ff18f6f8d0d05216f18da3ba723cbe2ef6eead7403cb4b322f13e0fb71a321186bd397de0dd9a8dcc01abfa313de6ba0c4af7be74f722f5e3fa030466d6be5b12dfd09543c908e8377dad8aef366655b53861b5220539f4430c0ba7b8774753c46a06e7c052864baec037c59f17bd508fbeb3e4d5e18ffb8fde8c22a0812694e30c513b4fb751a9e99292dd247f28cd483ff8c75855840bd", 0xec}], 0x12)

19:17:09 executing program 0:
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$sndseq(r3, &(0x7f0000000640)=[{0xa6, 0xfc, 0x2, 0x4, @time={0x1, 0x1ad}, {0x1, 0x3}, {0x5, 0x1f}, @raw32={[0xb84, 0x1ff, 0x1]}}, {0x20, 0xb6, 0x9b, 0x6, @time={0x8, 0xc375}, {0x6, 0x1f}, {0x0, 0x3}, @addr={0x7, 0x84}}, {0x3f, 0x9, 0xc, 0x1, @time={0x59, 0x3}, {0x5, 0x6}, {0x7, 0x1}, @ext={0x11, &(0x7f0000000600)="6ecae40fa8cefe043bcaeb18495352b876"}}, {0xff, 0x8, 0x4, 0x9, @time={0x401, 0x7}, {0x8, 0x3f}, {0x20, 0x80}, @raw8={"5d9f3d9c1ff9c27e5184a46d"}}, {0x7, 0x4e, 0x4, 0x81, @time={0x6, 0x8}, {0x8, 0x40}, {0x6, 0x20}, @note={0x40, 0x3, 0x3f, 0x3, 0x26c}}, {0x6c, 0x13, 0x8, 0x20, @time={0x5, 0x1}, {0x7}, {0x80, 0x2}, @queue={0xc0, {0xd87d4ae, 0x6}}}, {0x6, 0x0, 0x5, 0xbb, @tick=0x2, {0x0, 0x9}, {0x40}, @note={0x3c, 0x2, 0x3, 0x1, 0xffffff24}}, {0x4e, 0x3f, 0x0, 0x8, @time={0x10000, 0x1}, {0x40, 0x1}, {0xe1, 0x81}, @note={0x9, 0x6, 0xf5, 0x1, 0x52a0eb05}}, {0x80, 0x5, 0x6, 0x0, @tick=0x3, {0x5, 0x43}, {0x1, 0x1}, @control={0x7, 0x5, 0x3}}], 0xfc)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0xdd, "1e16a67d662cc2eb3fc891308dfa940ee01540989dd7df1d027739b0031eade6f9d750d07a5b83241f022b2fa41c120da932e6889cfdf5b14cef63ea9649204d00564e8bfffc3c3eb32cef7bae8571af444bfff824e44f3b73ac0f6bccd31daf29c4f264d9d00aa20be93a6894639242bbddbb6a11147b716d820a5d8fb5ac9ee91becc10f3631a1230e99f2d0f3cd5af19ee7facbca382f41090582170d30289bb46ea0aad603103b403d5386916587c05c925de59a089f645d638757b460bc2c2b63a0ca8b338a7c7c64ceb0b999a0d241c3149350c5007bbe1e41f2"}, &(0x7f0000000340)=0x101)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x2000, 0x0)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}]}, {0x1c, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}]}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x40001)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  416.035291][T11127] IPVS: ftp: loaded support on port[0] = 21
[  416.112489][T11146] IPVS: ftp: loaded support on port[0] = 21
[  416.654779][T11146] IPVS: ftp: loaded support on port[0] = 21
19:17:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
ioctl$TCSETAF(r0, 0x89f0, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, "8e1ce365fbd86368"})

19:17:11 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000500)="e528ca789f11f24bb1cbcf9862201d2d9c1576f9ec2353036607d13653a499cc711160269c61454011757da719b9cbea00dc51e822010e045fb669227df124044223fb6218f033ab0372426ace5dd4b9a2845385c870a6ff52c9bcc01b3e79ab1d4cffd3ed0a95195faac6c16ee4ee2584c9383f42a003971437788ecb563f3161e17c2fb5a8aaddd539229fc550fb2b86b56a9f00a48a75bd202744cffb2fb6f80fbd2ce15ce090f2513b8ed8b566fe32866c918a0d5895336915ad2b1a0b30cb18e90a6085caaf89299b2733d0323a08a6da81a4475fc329c7903c67a2e689a528cd1ad9906c5d58a3af54dd1a12865d2915031bc5b0302f170ae4bea8cb53997bf9ddd076a68baa069e73d032c456e4f3912de5fa38a20b1efc9e93f8b96eb75b9055af8f8c9675ec5a62b2f2067eb870213cded968c57fd2c8f3bf9f00dfc69dea3ca48683ef59a4a170bd2fe87ef92bb6368c7ae4a827a1dd0b4d5950c1f25ce1fcfa2ca167b7fb4acacd5f5aa176f4269b888d1f64a494664b5beed3fa24e90c075e2c393d6f619dc9c20e9a630769cd40c9c80a05d0fa92c895bf568228064989d85e8027e105a2e3141e460cb022146be3575c9ea5f788ae68e160c2ba890e629f959dee8694233afc017980bcb4632dd57da364709491e91d2d3578e031d136ab04b5510925530fe96a407ad0814d82c244d0c1db1b86599fdbf8877165f156169b53cf43f03fc8e675d58a6925dc3f96047ebacfac7c8662025c9378f741c1d60958ea7bac3cb7c290b0a1de84018d8d84ed44cda722472ca0f0f09d15507ce48a8c34b74ca05896588d0d913d6a87544a609a8dc8c215087b46cda7c4a455477ec69674f63a3f2c6b86edd76856ce204d30076f89329d6e662cccb2d61bc3fccece30da213c800427d9d3d776d12e086c3098f4d8841abbe613dd8702cbe631fc740e77126560256a78f8067b8b11f97f5ed2f09ec5be228ec96459aff601767870bc486bb9f6935706e48cf3c85103a32cb126ff23ee903b33da6238e418d67f5a799e9333573a1959bb2e4ad1d1db367a73723069230b182039898dae2fdfa2d4c31217a95e0e06d92b0edef67c646f308639599d6ae3f2a5a0a2532f3cc560b408e36ad4b057953c65395278e60936cc81b20ce9a45aa91955caab9edb1ef9e146e77cfbff613e264d1ab2186b4294bbbc4cc1315e0162ac27888b1a3afdfbd50aa02c3b9348ccd12ac039f18a508021d2b57094ce37e5da3d4967bd055eace4a5f4caebe59074e5e53dd412f99c64944e03a214fb2005079f71c1b275b48c5c893c9549424aa3650d093e39576116a59bb0551db3b9762c6a55e877853e9be615ce3b69931d7c303f59804a7f8f96dd1550afb615e567512bce98fa277d3ce19b13c3c8e5fd2b9f3b432f79ade0e1852b74305bc917909c82c177d3a9305c5d5c7814147e415224d05c9df991863b417aba9ac612406fc894b41c419611015eb61b5c949a6c5c726255068105b969c5249c7553f2dd8c0d1d970a8923ebbf88d5a6051bd30e9b23e9d6182e611feebbbd626dd59ada5ac698b30b092e079564ffac8b8a17d4d6ec164c65cbb13f7cb5a5b71db29e95a460492202fbc893a96b9c7ff228575ee887b8c24af54b8a4bf0b14c16111886816582fa8d50f68429994b9ba4fbab54ae1299dddb4807c01526e952ffab51bd90700dd1ad9380d527ad1991eb944a1e406403d3abb797d36ea2569e01d9d8fa4948e2167543474d5ec7b7368c2fbb3cbf3a28a29fc60393aed4d57497de84cc1108263d0e16aaaa55f0fd3dd99181339088a2fd4d89cd288e2f4efa3dd3360d0ab67e80529f700af7f88ae673915969465354877d6e443a3db384b63f4b25d69f36d59a391e588414e263b8d0cd8e0b37473c6868dc655a6532fa06102927eb2fd4ad7785470d04f4b1cdd40bcbe4a0b485d477a9876e9e371c9d594af56d0a79778f6a7ca29012f384990f8bce0933d20a999c9ae804fe5f2b1da869968200773d5164602513456b92d82d48167257accf803512f9938b3fe5e60dcc02fc0e00d59b24f8164603961fc6168e92f31e8ebb3146c237e401f7fa628a26b9cc30f97dad6a91b11544b71397208ae7694cdf2e86b7296ee0abe2acca5a4b8750c1435eace955157b8fef38116bbdd92827321f1164776577c050f0a0525b8c4bf85ffade8b75d3c7680fa4fe8a64d1f0b33d4a10fecad22f07e70c48399d8876c0bb7222ec82a4ec801bd9c6477e24495075da790514e7ff3909405794139ae41ea7b909b43b110cc2b8c2aa0f1a8f6a7a10ff304b7016ce48466e6b689b1e0c5369483af1b940996ffcee38f9ede462c97ddccc95eb815cf9d718210f637dac9640efa1a426bed3c48735d123c43ca51e2460146992c245010029f44503e3f1cd1d45828b3f410129ef3f917197e4d6d3fa172100f0a955c2b93bd6e4c82c27987ed8dd33418aca8e6c947955b27e17b4b7b13ff85fdc3b61346960ae32a36deab26229140820f309452e476e55f7dbfed4dc3c87325cd690b5d98b10160f96b9983ff0bff8f83b9f6e69828ce7a5ab8b5c63ce89420da7350b6543ff633ccb3afc2060854111208dce9f42d56958c535fbe314c2b385389a55f04e5e2603f15a599c18881bbe915429077d302694cd74a74ab7563d093a9bf106bde8e2519d75308f8083eae120c540d054dff9f48752a7bdd0b75ffd7ad72280a4774512ba01ff527705b4440570dc3bd0f2dcf189e3dd7d570a818b1839f6813be24cec28d4f2d2d799b19fc73ab2cdfe0011e784a652f1bd2c13addf38458c98dc6704ee504b8a819da280bc4947524b62b2d25ff9a31874781c46892ab98a3de2eb357e8ff20915a01e7221a6f30d97a8c4a5fa1ab932973b0e9bab33ee2b3b13715205dcd36f01349d78606db07cef19a20a2d2575c986b3f6ddf93399d0f4a845b4d5a4090acd5f3a58515e49a286cde6cc89aa6982d789f322bd023999f98e5cb9190894a8cd69d82f1428d3665b0c374f2b237a6a0190ed927fe145ca59d8bd718c2d6f86d62d2a0472493fef9121b9d304dbbf418d4a551ae808d28909f26870b542c5c9aa525c4b7e95b0e9c8239c8e6330dc79578bedb47d0fb133cfe38cc010319de731931b8d4dd0fba1915672b66738d4231d48af80e70da81e36991e1d3aedee8ce2766cad1cdb277e8686c0c9ce6b2d171f6d1ffe7a94616861aee05e68a0e944bd9b36ef0a10608bad021e9053a3f00673a763647321d0e8539a8bb67217603cbed67c0fc49b72809dd3f8482600f3f570f1ddf33b19a88760b845caa2abfd53fdc83ec16b66c71226a6265d688d5649022c3b76ba86c8a951b87054b73b0d9296e0aae72c033081074f8538b7ede5d02fffc6aec0c9015f77721bce08c3636a2af9882931ed4bc756407e68fde9913d0f193bd13a7eaf82eef45d850d00fc20c6cf5c75a7b6a8155e734a2da6b126da8b5dd795e6d385fe47ee268de9bcccf50172497e08a7162e64f6785a35b87c543e6e9d56283fd7b88a74a70f2c98c754a6082ad04628ddfdfd308ea670e1abbe444174e6843f5cccf5cb997bcbcdbda41dd3b1256f56cf325a3da06942461d404f3e274f2901929c6df9ef46654575c89f24462a9e26eecee86482105cc4081d68d2845b480a280b5c05d8e699718a759313729a3c826bf4e9138aa4c346c472cb190fc7ec24f004f512dba5ec5b966cea209f5c1dad945f52155d6a6e706ea4cda47b551a1b2f6c9579a28a148b5de605cd77261b7045f1")
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsu\x00', 0x101400, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f00000004c0)={0x9, 0x1, 0x80000000, 0x0, 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x3, 0x0, 0x1000, &(0x7f0000007000/0x1000)=nil})
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b67, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)="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"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001140)='/proc/capi/capi20ncci\x00', 0x600000, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000001180))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="2ab294c231bb3b59c4fb31254b1a76d976f4d62708f2855c53c8d64f49c4e5892fa1cc2e11e7f3f2d83b581543cce957a889953070858182457ee1794422430212f78cf0b748aea51bc6b1b865296e969074708f", @ANYRES16=r8, @ANYBLOB="100027bd7000fddbdf25040000005000028008000800000000000800050066623c3106000f000180000008000400010001000800090001000000080006000700000008000700060000001400010000000000000000000000ffffac1414bb2c00028008000300010000000800030001000000080005007f00000006000e004e23000006000b000a0000000c0002800800030001000000080006000800000008000600040000000800050000010000"], 0xb4}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x80003, 0x6b)
r2 = socket(0x10, 0x80002, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000300)=0x1, 0x8)
setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x8, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000180)={r8}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={<r9=>r8, 0xe8, "99faf8f47f553959d32583d677af43dac108be2db35af7207e95e52f406431721de561348954661714ce89f0b8a730c6f8e4dc47db6eb24649eedf1e5965440d1eca6eeb60939031cd2eb2ccc94904528ac28b2181ec58ac3579e37b47228e241d87e42bb62bbd9056fc85d04e4cf52fcec02addbf7fa9bba8bfeaaafece4d0d9e77665f6c6c9a53fc0ab946268eefb8983f52e274133aad9bbaa2ddad302fcbd258372a7d0c7b55d508df4b38cb13c03a2cdb6d9e5190693e99958f22f3c1f693445cce50eedfd41600e51331b2321c028c3be3d88390ec8da73ddf3a469f59b6fd29e24e8cc90d"}, &(0x7f0000000000)=0xf0)
recvmmsg(r3, &(0x7f0000002e80)=[{{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/221, 0xdd}, {&(0x7f0000001780)=""/125, 0x7d}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000001800)=""/122, 0x7a}, {&(0x7f0000001880)=""/212, 0xd4}, {&(0x7f0000001980)=""/180, 0xb4}], 0x7}, 0xfffffffc}, {{&(0x7f0000001ac0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1}, 0x6}, {{&(0x7f0000001b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/146, 0x92}], 0x1}, 0x1}, {{&(0x7f0000001cc0)=@xdp, 0x80, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/172, 0xac}, {&(0x7f0000001e00)=""/106, 0x6a}, {&(0x7f0000001e80)=""/217, 0xd9}, {&(0x7f0000001f80)=""/96, 0x60}, {&(0x7f0000002000)=""/46, 0x2e}, {&(0x7f0000002040)=""/201, 0xc9}, {&(0x7f0000002140)=""/214, 0xd6}], 0x7, &(0x7f00000022c0)=""/77, 0x4d}, 0x3ff}, {{&(0x7f0000002340)=@rc={0x1f, @none}, 0x80, &(0x7f0000002840)=[{&(0x7f00000023c0)}, {&(0x7f0000002400)=""/54, 0x36}, {&(0x7f0000002440)=""/102, 0x66}, {&(0x7f00000024c0)=""/9, 0x9}, {&(0x7f0000002500)=""/73, 0x49}, {&(0x7f0000002580)=""/206, 0xce}, {&(0x7f0000002680)=""/134, 0x86}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f00000028c0)=""/133, 0x85}, 0x10001}, {{&(0x7f0000002980)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a00)=""/76, 0x4c}, {&(0x7f0000002a80)=""/10, 0xa}, {&(0x7f0000002ac0)=""/40, 0x28}, {&(0x7f0000002b00)=""/154, 0x9a}, {&(0x7f0000002bc0)=""/181, 0xb5}, {&(0x7f0000002c80)=""/137, 0x89}], 0x6, &(0x7f0000002dc0)=""/179, 0xb3}, 0xffff}], 0x6, 0x400000c0, &(0x7f0000003000)={0x0, 0x989680})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000540)={r9, 0x7d, "382f8c6b5a728d0c8d733384b5218f0002107cbbac078e93650c92759f591d1b88823fe2bc0d1a5798d6dd324f8ce4f53f6dd312c86fc0a0dab95196b860c13226dbb97abf340e7b079253181d29c31c3b03457ffb751d94978315da8cb6856bd24c362cf4a589a592dd65d1eec2511e87b0019db824f40a06f7324c7c"}, &(0x7f0000000080)=0x85)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8001}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OKEY={0x8, 0x5, 0x31}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x78}}, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
connect$netlink(r12, &(0x7f00000003c0)=@unspec, 0xc)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071")

19:17:11 executing program 2:
connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffe3)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x8, 0x80000001}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0xc0000080)
inotify_rm_watch(0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180), 0x2e)
sendmmsg(r1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000294}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x24001040)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
r3 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, 0x0)
setresuid(0x0, r4, 0x0)
ioprio_get$uid(0x0, r4)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)

[  418.003444][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  418.003464][   T27] audit: type=1804 audit(1583090231.245:142): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/100/bus" dev="sda1" ino=16984 res=1
19:17:11 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='gfs2meta\x00', 0x0, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480)="bd", 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @dev}, 0xfffffffffffffe0e)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r3, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0x8001, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrusage(0x0, &(0x7f00000001c0))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a80016000c000100e5581100000001000005006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)
listen(r2, 0x2)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
getegid()
sendmsg$unix(r3, 0x0, 0x40000)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x410000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000180))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
connect$tipc(r4, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
r5 = syz_open_procfs(0x0, 0x0)
ioctl$RTC_UIE_OFF(r5, 0x7004)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00')
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c110000", @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf250f00000005002f000100000008003c00060000000500380000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x6000}, 0x20008101)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

[  418.231994][   T27] audit: type=1804 audit(1583090231.245:143): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/100/bus" dev="sda1" ino=16984 res=1
19:17:11 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000007e0000004500fde50000000000849078ac1e0001ac1414aa00e1abfd8e1ab50000000401907800f426e60b3237fb"], 0xfdef)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={[], 0x27}}, 0xa, {0x2, 0x4e24, @local}, 'vlan0\x00'})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000100)={0xbd, 0xd, &(0x7f0000000200)="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"})

19:17:11 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)

[  418.331136][T10273] tipc: TX() has been purged, node left!
19:17:11 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000440)=""/136)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x24000, 0x0)
ioctl$KIOCSOUND(r7, 0x4b2f, 0x3)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000100)={0x1, [[0x101, 0x6, 0x7ff, 0x1, 0x8001, 0xc8, 0x6d4057c2, 0x4], [0x3, 0x0, 0x7fffffff, 0xd0f, 0x3, 0x20, 0xffffff80, 0x40], [0x4, 0x3f, 0x3, 0x1, 0x4, 0x9d2, 0x700, 0x2]], [], [{0x4, 0x40b, 0x0, 0x0, 0x1, 0x1}, {0x1f, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10000000, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xc6, 0x8, 0x0, 0x1, 0x1}, {0xeb88, 0xfff, 0x1, 0x0, 0x1}, {0x4, 0x8, 0x1}, {0x20, 0x3, 0x1, 0x1}, {0x0, 0x3f, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xffff, 0x0, 0x1, 0x1}, {0x1, 0x56c, 0x1, 0x1}, {0x91, 0x2, 0x0, 0x1}], [], 0x80000001})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x8000, 0x0)
ioctl$SG_SCSI_RESET(r8, 0x2284, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_to_hsr\x00', @remote})
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080))

[  418.408311][   T27] audit: type=1804 audit(1583090231.305:144): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/100/bus" dev="sda1" ino=16984 res=1
[  418.440344][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
[  418.471073][T10273] tipc: TX() has been purged, node left!
[  418.566553][T11197] gfs2: gfs2 mount does not exist
[  418.806133][   T27] audit: type=1804 audit(1583090232.045:145): pid=11207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/101/bus" dev="sda1" ino=16985 res=1
[  419.073017][T11203] gfs2: gfs2 mount does not exist
19:17:12 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
utime(&(0x7f0000000040)='./file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0xa)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
dup3(0xffffffffffffffff, r3, 0x80000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x33f9, 0x1, 0x8, 0x535, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x40)
dup3(r6, r5, 0x0)

19:17:12 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)

19:17:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrusage(0x0, &(0x7f00000001c0))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a80016000c000100e5581100000001000005006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)
listen(r2, 0x2)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
getegid()
sendmsg$unix(r3, 0x0, 0x40000)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x410000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000180))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
connect$tipc(r4, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
r5 = syz_open_procfs(0x0, 0x0)
ioctl$RTC_UIE_OFF(r5, 0x7004)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00')
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c110000", @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf250f00000005002f000100000008003c00060000000500380000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x6000}, 0x20008101)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

19:17:12 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x694)
fallocate(r0, 0x0, 0x0, 0x4003ff)
write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r0, 0x3, 0x7fff, 0x8001)
fallocate(r0, 0x3, 0x5e89, 0xfff9)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000)
sendmsg$inet6(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="7abb6bb248df083620a4ae0344375e8fda0c656b198f68e4a269958b00"/44, 0x2c}, {&(0x7f0000000100)="fc0b4094e3a0d2d3149c4fa773b1cd757343dbfe04512ad99f7e7c87c4c25e3cd3ff4b4587e0aa312d5f5c7aacabcde8c4494728fee3d84da3df83429f2550a90101bbf4a2e08135a737afed2cbaa0d86a6456817d91de6f35b60d444b121fa57b726b89c8181d5052f77e33ae92d75967f61d8d3dc97eaa7b3259a667241a4514848ddb0a9afe52ecbf6649334ca5013339ce83a20d6b8c0c820ad0ccd9cb100d285b9493377a1f6e3c8fad941ac0300589073e80317bb621dea99cbae335779f230e38fb4011ce6a99bfe38196f176048da4ee2d0e83b7a0937d012b2f544358bd43d78f146b3e1d5bff8e1dab213d2c9ac347e69a37d5", 0xf8}, {&(0x7f0000000640)="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", 0x129}, {&(0x7f0000000280)="e69c61b22dd31fd625545266fd04a712e7908a0d6bbbc3ae089873841c0ecdbc8d28bdb2cd13e4484331aa9d8fa85ddf2869d6dc5e4eec9dde752f4f115ce5b9cf755f6167dd62908a6ad793c9da04190eedf450", 0x54}], 0x4, &(0x7f00000004c0)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x2c, 0x14, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, [], 0xa}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @mcast1, @mcast2, @dev={0xfe, 0x80, [], 0x22}, @mcast1, @rand_addr="8f058472d674fd3dcfc77ae31fa21b03", @dev={0xfe, 0x80, [], 0x3d}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x84, 0x2, [], [@ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0xb}, @pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x2b, 0x9, [], [@ra={0x5, 0x2, 0x7f}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x1, [0x7ff, 0xfffffffffffffffb, 0x3, 0x800, 0x3]}}, @enc_lim={0x4, 0x1, 0xc1}, @jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x4, 0x1, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x170}, 0x0)

[  419.748143][T11226] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
19:17:13 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x1401, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2000}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
fcntl$setstatus(r0, 0x4, 0x42000)
set_robust_list(0x0, 0x0)
fanotify_init(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x501000, 0x0)
getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000200)=""/245, 0xf5)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x749040, 0x0)
bind$rds(r3, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b5c35a7645318bcf1c28a0", @ANYRESOCT, @ANYBLOB="79aa000000000000000009000000040001800c000180"], 0x3}}, 0x64044194)

[  419.835296][   T27] audit: type=1804 audit(1583090233.075:146): pid=11229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/102/bus" dev="sda1" ino=16986 res=1
[  419.963215][   T27] audit: type=1804 audit(1583090233.165:147): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/102/bus" dev="sda1" ino=16986 res=1
19:17:13 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

19:17:13 executing program 2:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x8, 0x7])
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r2, r1, 0x0, 0x80000005)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001500))
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x80000005)

19:17:13 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)

19:17:13 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c)
clock_gettime(0x4, &(0x7f0000000000))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
wait4(r1, &(0x7f0000000040), 0x8, &(0x7f0000000140))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240))
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

[  420.441602][T11245] Dev loop2: unable to read RDB block 1
[  420.447440][T11245]  loop2: unable to read partition table
19:17:13 executing program 1:
epoll_create1(0x0)
pipe(&(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

[  420.530871][T11245] loop2: partition table beyond EOD, truncated
[  420.594734][   T27] audit: type=1804 audit(1583090233.835:148): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/103/bus" dev="sda1" ino=16989 res=1
[  420.632791][T11245] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
19:17:14 executing program 0:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = fcntl$dupfd(r3, 0x0, r4)
r6 = dup2(r2, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
lseek(r0, 0x7ffffc, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0)
clone(0x26140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="3e2f66696c6530aa275ff12773f3bf532873d237afcea7ad7714c2ca7631336e55de942845de96dece87373d"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='udf\x00', 0x0, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0)

[  421.012523][   T27] audit: type=1804 audit(1583090234.255:149): pid=11269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir253710925/syzkaller.NsBljY/90/bus" dev="sda1" ino=16995 res=1
[  421.012701][T11263] Dev loop2: unable to read RDB block 1
19:17:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=<r2=>0x0)
ptrace$getsig(0x4202, r2, 0xe42, &(0x7f0000000040))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x0, 0x1, 0x4, 0x4, 0x9})
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c)
syz_mount_image$bfs(&(0x7f0000000280)='bfs\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="5dee512b55e00a3388", 0x9, 0x3f}], 0x100000, 0x0)
sendmsg$kcm(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="39000000140081ae00002c000500018701546fabca1b4e7db89c40ebb37358582bdbb7d553b4e921556b3d5df500"/57, 0x39}], 0x1}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3}, 0x8)

[  421.241320][   T27] audit: type=1804 audit(1583090234.285:150): pid=11270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir253710925/syzkaller.NsBljY/90/bus" dev="sda1" ino=16995 res=1
19:17:14 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  421.319745][T11263]  loop2: unable to read partition table
[  421.325552][T11263] loop2: partition table beyond EOD, truncated
[  421.359920][T11263] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
19:17:14 executing program 1:
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

[  421.449001][   T27] audit: type=1800 audit(1583090234.285:151): pid=11269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16995 res=0
19:17:14 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x7d, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000580)={0x2, 0x73, &(0x7f0000000480)=""/115})
r1 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x301040)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000440)=@gcm_256={{0x304}, "117d0386ddf3737e", "b8776c02a4f64d4315bb9ab5933e0814ea4c1cfabab6e698d6be57febb03bc00", "72330695", "439d89ab1af1f6e0"}, 0x38)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x9f0000, 0x2, 0x8, <r3=>r0, 0x0, &(0x7f00000002c0)={0x1ae1856, 0x8001, [], @value=0x37a}})
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000380)})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "b16ff1a855bbb28040ed"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a7f05c32c32fe9de9682e87ced"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2ac347d005bdc7497cab0663ce"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac5ac8afeb24a82290e3c9f5a8"}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff10004000632f77fb0514140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xb20c, 0xfffffffffffffe09}, 0x28)

19:17:15 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x44000)
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000080)={0x1, 0x345e, 0x5})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @bcast, @rose={'rose', 0x0}, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]})
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001300)={0xa, &(0x7f0000000700)="84"})

19:17:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c86", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x30}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

19:17:15 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x369}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}}, 0x81)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x0, 'veth0\x00', {0x3}, 0x4})
bind$inet(r2, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000972ffc)=0x1, 0x4)
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket(0x0, 0x800000003, 0x0)
bind(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r4, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0)
syz_open_dev$vcsa(0xfffffffffffffffe, 0x24, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000000))
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fcntl$getflags(0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x1c1800)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000100)=0x4)
close(0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0)
close(0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r7 = socket(0x29, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x80000, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x1, 0x0)
open(&(0x7f0000000600)='./file0\x00', 0x600043, 0x40)
r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000000c0)='./file0\x00')
mkdirat(r8, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
ioctl$sock_proto_private(r8, 0x89e3, &(0x7f0000000a40)="e46b206678820ad31e977c62258388faf0bb814cdd5238ec9dbc9d023856be371c711d7d4fb06d9ccf0674a3c882070abf19ee78426ffd48983dcdb38f81fc99443cf5da1c81209335d648b95cf6347e5f520d19cb625393372f9fce6c247801e054654a3e41c077c0fa961221b977ea7f2fa5ebac310f954d12cbfcfb168ab50347207d973c85d9c113f16d9e04124a8b8add667188f9c4d55fdf92c8")
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f0000000280)='./file0/file0\x00')
renameat2(r9, &(0x7f0000000100)='./file0/file0\x00', r9, &(0x7f0000000340)='./file0\x00', 0x0)
r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', r10, &(0x7f0000000280)='./file0/file0\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r10, 0xc02c5341, &(0x7f0000000a00))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}, 0x20104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0)
r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000015c0), 0x8}, 0x21e69, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x2002, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r11, 0x4, 0x42800)
getpid()

[  422.013217][T11304] device vxlan0 entered promiscuous mode
19:17:15 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:15 executing program 2:
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x81)
fcntl$setstatus(r1, 0x4, 0x2000)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x800002, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x8}})
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x109)
fallocate(r2, 0x3, 0x0, 0x8020003)

[  422.244786][T11309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
19:17:15 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0)
splice(r2, 0x0, r3, 0x0, 0x400000000, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0)
getpid()
socket$unix(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab050000030500810ae63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, r5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)

19:17:15 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c86", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x30}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x80000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

[  422.839370][T11332] device vxlan0 entered promiscuous mode
19:17:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
get_robust_list(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1410c2, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
shutdown(r4, 0x0)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r5, 0x400000001ffffffd)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000003d40), 0x0, 0x0)
r7 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r7, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
accept4(r7, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0xffffffffffffff6f)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r8, 0x0, r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r10, 0x401054d5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, <r11=>0x0, 0x0, &(0x7f00000007c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x0, 0x8}, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=0x10001}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000005300000095000000000000445a0708d1303274df96965142c50000000000009a791dba3e4233542f67a07e7255df2fa25dc49432457ddde8ec5afff74287d7b8e902ab041da7cbfb0fccd473038d958723088900cdc2ffcc604a94dbf6fd2cd61b0dfc2cbe6880"], 0x0, 0x0, 0x2e, &(0x7f0000000500)=""/46, 0x41100, 0x9, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x8, 0x3}, 0x10, r11}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, r11}, 0x78)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

19:17:16 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0)
splice(r2, 0x0, r3, 0x0, 0x400000000, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0)
getpid()
socket$unix(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab050000030500810ae63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, r5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)

19:17:16 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0)
splice(r2, 0x0, r3, 0x0, 0x400000000, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0)
getpid()
socket$unix(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x10, 0x0, &(0x7f0000000140)="a673f3ce05f1a282eeab050000030500810ae63238f9cf8c0ccade00556e97d003cc298613f230d6841f3099e19fd903b2ffa5106c71ac91c7457b2d7f4157f069737d63ab32be2a651d7cee2970a9df488cae6702031c92a8b4b6376f9972f3848c104d413745d4c57253b2d61d64787c4de49fc5", 0x0, 0x3ff, 0x0, 0x0, 0xffffffffffffffbc, &(0x7f0000000040)="15396af9a72e96da8129ed1653da4c7f58430968e943c7415c1135cc832d158cfe31f78128c0f6ced392de7b250aa16a0837c05297e7c9d3db2466761815aeb216c263f7010b0d4de72c5f199f0be260a48e8c37d2ea3a52026012d3"}, 0x28)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, r5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)

19:17:16 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:16 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0))
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x204600, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x8)
read$dsp(r1, &(0x7f0000000180)=""/4096, 0x1000)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045006, &(0x7f0000000000))

19:17:16 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_emit_ethernet(0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045009078ac00"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080000090780000535570745fcdd9455f63dcd76ef08d2320a85dc342bb9a47ab0c47762045fcc618ee440bc65b7bd181478ab7a10104fa96023dec0000000000a1cb82597d64cfd79d1ad150b3fb8ee1bd52c31c112391bedc366f86de8d2e82b88263f94177d9927e71feac8ef267f3094255e778d70bdea6ae56a3e75801f9bf44397cbb65e422eb524ce5"], 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
getpgrp(r6)
r7 = syz_open_procfs(r6, &(0x7f0000000040)='comm\x00')
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="ec6ee5eaabbaf1c8277d41497c2e7b5c2ef538c85b21ba1e9e91968ff4a979ed0c8627e7e09d407227bc276f7cf7dd19af1634128d2925c07f9c63e4fb10dbf658b4d7a580e185e9bf805c9a7a", 0x4d, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000200)={r8, 0x9, &(0x7f0000000140)=""/9})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2, 0x2})

[  423.405583][   T27] audit: type=1804 audit(1583090236.645:152): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/107/bus" dev="sda1" ino=16970 res=1
19:17:16 executing program 0:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
fcntl$setstatus(r0, 0x4, 0x42800)
add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000440)='./file0\x00', 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
pipe(0x0)
r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e8, 0xd1}})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/69})
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000300)={0x0, 0x17})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
getrandom(&(0x7f0000000080), 0x0, 0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
bind$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast1}}, 0x1e)
r7 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r7, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r7, 0x0, 0x0, &(0x7f00000000c0)="0204", 0x6)
setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37)

[  423.485142][   T27] audit: type=1804 audit(1583090236.675:153): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/107/bus" dev="sda1" ino=16970 res=1
19:17:16 executing program 1:
r0 = gettid()
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
getpid()
set_mempolicy(0x3, &(0x7f00000000c0), 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = open(0x0, 0x0, 0x0)
fchdir(r2)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', r4})
pipe(&(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0)
splice(r7, 0x0, r6, 0x0, 0x1000000008, 0x0)
r8 = getpgid(0x0)
ptrace(0x10, r0)
r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x2000, 0x0)
kcmp(r0, r8, 0x6, 0xffffffffffffffff, r9)
r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x54182, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x5}, 0x8)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r12, 0x80845663, &(0x7f0000000400))
preadv(r10, &(0x7f0000000480), 0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

19:17:16 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42800)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
dup2(0xffffffffffffffff, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x6c, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0504000000000000040096a85f6c"], 0xe)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$ax25(r5, &(0x7f00000000c0)={{0x3, @netrom}, [@null, @bcast, @netrom, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x4800, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000600)=0x8)

[  423.523462][   T27] audit: type=1804 audit(1583090236.725:154): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/107/bus" dev="sda1" ino=16970 res=1
19:17:16 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  423.701296][T10273] tipc: TX() has been purged, node left!
[  423.715794][T11365] team0: Device ipvlan1 failed to register rx_handler
[  423.930102][   T27] audit: type=1804 audit(1583090237.165:155): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/108/bus" dev="sda1" ino=17000 res=1
[  423.970024][   T27] audit: type=1804 audit(1583090237.205:156): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/108/bus" dev="sda1" ino=17000 res=1
19:17:17 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000080}, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYPTR64, @ANYRESOCT=r6, @ANYBLOB="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"], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

[  424.227646][   T27] audit: type=1804 audit(1583090237.465:157): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/109/bus" dev="sda1" ino=17000 res=1
19:17:17 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  424.319249][   T27] audit: type=1804 audit(1583090237.555:158): pid=11388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/109/bus" dev="sda1" ino=17000 res=1
[  424.512611][T11365] team0: Device ipvlan1 failed to register rx_handler
19:17:17 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
semget(0x0, 0x0, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x8, 0x48181)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x224202, 0x100)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
dup2(r3, r3)
syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x4004041)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2091240}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x101, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x43357d25e9359f0b)
open(0x0, 0x2cc00, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
r4 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x1ff})
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x80a, 0x9})
mq_timedsend(r4, 0x0, 0x2d1, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100))
r6 = syz_open_pts(r5, 0x1)
write(r6, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x6)
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
dup3(r6, r5, 0x0)

[  424.553958][   T27] audit: type=1804 audit(1583090237.785:159): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/110/bus" dev="sda1" ino=17000 res=1
[  424.636779][   T27] audit: type=1804 audit(1583090237.875:160): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/110/bus" dev="sda1" ino=17000 res=1
19:17:19 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:19 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x104400203)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000040))
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xff000000, 0x200, 0xfffffffffffffffc}, {0x3, 0x0, 0x8000}, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote}, 0x0, @in6=@local}}, 0xe8)
socket(0x28, 0x6, 0x0)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x0)
keyctl$read(0xb, r5, 0x0, 0x0)
r6 = add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r10, 0x202002)
keyctl$chown(0x4, r10, r8, r9)
keyctl$read(0xb, r10, 0x0, 0x0)
socket(0x0, 0x2, 0x6)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r11, 0x0, 0x0)
keyctl$search(0x4, r6, 0x0, 0x0, r11)
r12 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, r12)
syz_emit_ethernet(0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f0000000540)="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", 0xdf2}, {&(0x7f0000001600)="f04f58ad64d16996e50bf9653ab6bfe984a38c36441c5ecf69312dc6eeb79f232e81da11da227ed50f1a6337f70c23bb7d393d899a4a0e300bf442ab664287514b0a851b071e7a5b92bc765b374893614fb972be1aabe7e79cfeec0a657c7d0c5b9478928a865702712f4ec7953f885cecc52ca96698f1c128a7a5778764df37889652555725bae39ccd95479429e5a0b41b02260a20051839a0a98f3d011feefa7f2d5ea619035bf41205546ca20c6d24160eb58cb768327667508c7c9c8d76a4e9f8afcfb82dacceec944d6a5779083fb92a222c216837d8c6b6b4a9573c41", 0xe0}, {0x0}, {&(0x7f00000017c0)="6f2a459bb40cc6cfa19faf6f6be3ca337df527fb240c6fb18238dc79bf6f6da3b69b36c7724837db188391983f6bc9cb377fa4ebb947b762f4ff95bf2a6809e1b744ee9b03", 0x45}, {0x0}, {&(0x7f00000018c0)="412ef36b8da145367d7ed6", 0xb}], 0x7, 0x0, 0x0, 0x4048883}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f00000002c0)={<r13=>0xffffffffffffffff})
vmsplice(r13, 0x0, 0x0, 0x0)

19:17:19 executing program 1:

19:17:19 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x482, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r1, 0x401}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={<r2=>r1, @in6={{0xa, 0x4e21, 0xffff, @ipv4={[], [], @remote}, 0x8}}, 0x732, 0xffff8000, 0x7ff, 0x80, 0x5}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x5, 0x20}, &(0x7f0000000180)=0xc)

19:17:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0xf7fffffe, 0x28)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x799}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
dup(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x480000, 0x22)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
close(r1)

19:17:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58)

[  426.303969][T11424] IPVS: ftp: loaded support on port[0] = 21
19:17:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
setrlimit(0x5, &(0x7f00000002c0)={0x6, 0x8bf0})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xbc010000, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0)

[  426.447539][   T27] audit: type=1804 audit(1583090239.685:161): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/111/bus" dev="sda1" ino=17025 res=1
19:17:19 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000140)='big_key\x00', 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$search(0xa, 0x0, &(0x7f0000000000)='.dead\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
pread64(r4, &(0x7f00000000c0)=""/70, 0x46, 0x43454c9e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:17:19 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:20 executing program 1:
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{@meta='meta'}]})
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00')

19:17:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f000004a000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x4434c000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x4)
lseek(r1, 0x4200, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
preadv(r2, &(0x7f00000017c0), 0x3da, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4053, 0xfd5}], 0x19, 0x0, 0x0, 0x1f4}, 0x800000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/136}, {&(0x7f0000000140)=""/34}], 0x0, &(0x7f0000000440)=""/104}, 0x6}], 0x1, 0x10100, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x401}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6, 0x3}, 0x8)
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x2, 0x0, 0x0, 0x0, 0x600}, 0x20)

[  426.853478][T11461] gfs2: not a GFS2 filesystem
[  426.961033][T11461] gfs2: not a GFS2 filesystem
19:17:20 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x200100, 0x0)
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
socketpair(0x1e, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000000c0))
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000006c0), 0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

19:17:20 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:20 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0xfffffffffffffffc)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="050ec71a54b8bc835ba49149d5a0971e4fb60671945be9661f62802084f5bb1735f69587eb2b517b53ae8dd9ba622521b9f53f22a0c9a8e1e48e880c5842ff", 0x3f}], 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2f810200, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0)
r6 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, 0x0)
setresuid(0x0, r7, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@updsa={0x13c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfe, {{@in6=@local, @in=@empty, 0x4e24, 0x1ff, 0x4e22, 0x9, 0xa, 0x20, 0x80, 0x0, r5, r7}, {@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d4, 0x33}, @in=@rand_addr=0x80, {0x5, 0x24, 0xddb, 0x7fffffff, 0x0, 0x1, 0x1, 0x3}, {0x9, 0x29e, 0x7e}, {0x1, 0x0, 0xdfa}, 0x70bd2b, 0x3503, 0xa, 0x3, 0x7f, 0x18}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x4, [0x10001]}}, @sec_ctx={0x1d, 0x8, {0x19, 0x8, 0x1, 0x2, 0x11, "4a202fed7d27e6e8eb6ad45fd6d4a78d70"}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
open(&(0x7f0000000080)='./file0\x00', 0x90000, 0x7d203d59765f1004)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[  427.335176][T11424] IPVS: ftp: loaded support on port[0] = 21
19:17:20 executing program 1:
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x9a, {{0x2, 0x0, @local}}}, 0x88)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$update(0x2, 0x0, &(0x7f0000000480)="245b3f90da6e4a9b059c3b72eddf7d36891666ad0d68e2716559487a7475b432d7f0a29627ab94aefc4a3043d3a4745d19630600650a27c0e0e5bdd677987d5d3681e98d331364156683ea175e20a710431ccbf918a27bd5c66600c87163f58ab11d771c274038333b09f6ae5b51396aa92c66e09f5ef2a74eedcebe85059fb506521039ff68014cde602da91517c88e395acf43f8ca2e66802821f1cf6ddee6ef56d212e7f849008f557502b9c2f82648a3187c967d82726d810195bc5ca661f54667c26f9c221e2ad17b637b97723c81d379068a2d6f85e2cd1329", 0xdc)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
recvmsg$can_bcm(r5, &(0x7f0000001980)={&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x5, &(0x7f0000001940)=""/37, 0x25}, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5d5, 0x7fffffff}, 0x0, 0x3, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r10=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r10, 0x401}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000019c0)={<r11=>r10, 0xea, "35b2a60b48598fc6fbb40a42ef4397d8cd9adf33f414f7da2845d61edf8e084ac00f31aff78a11ca866cf06becb5295e2ed965d3a34466abd72c51dcb25567089c41fbd01d990cb1cfad17ec301b6f377dc60e66156522b27018c5cbe29bbd48641d3b4676733ed4f5c558def6e11d6e121e6db099a68d2c6e0421cf2bb3408323fb70d7a0592506ed03ae4b2b56f2b53454070bbe58780c5e295dfe5dc42053bbb15d02ef0c0d08986be47ecca0b07ff23d49d546e0d44ddc2136278a6a38573e1c5da4420cae2381a43e1a3b6b5ec01b52da7e15806dd5015d7f87db867e143c06e5eaffb8fe55c376"}, &(0x7f0000001ac0)=0xf2)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001b00)={r11, @in={{0x2, 0x4e24, @broadcast}}, 0x5, 0x4, 0x8, 0xf5, 0x8, 0x1000, 0x6}, 0x9c)
delete_module(&(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0xa00)
r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r13, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/144], 0x90)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r12, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  427.443813][ T7793] tipc: TX() has been purged, node left!
19:17:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x42eef, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="68000000100005074a03ffff3400000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="601fd3f16851e0279a5e1b53122dc4f518c243ea25d1747ccc8a4354d0e9851b1b0e522d7c812ee05dfa3305b8fe923173001ccba60cfed045f9880964b352ec26f6f9fc591e95cea91a08d9fd5c6f4c3f793776420a27fa5d675aa12ee5dc4248ae6c82c84a73769c8ff333d82f58ba58d55db815e9f024d0e8ee7c51a5792f81e4aa39d347be9c0589c37d25f00de69004e4c4ab37cf4c889eb2bc71500ff58d4f4ca3aa0d1e40964a2507d2d99fb8ff3fd9a2c0e6"], 0x68}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000002a00))
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
syz_open_procfs(0x0, &(0x7f0000000640)='net/ip_mr_vif\x00')
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/69})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
r2 = open(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000180)={0x4e, &(0x7f0000000200)="86b038643f4f1d987bf8279c213aca811b6ee86217f44a776e061b589a63c10f0a657da4ed7b560c0df6eb1621b04646e2184ac1e26b84303ab9d0247869fa43f6cf2b2c43a6e4effd79027f06f4"})
ftruncate(r2, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x0)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

19:17:22 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000008c000000030a00000000020000000900010073797a300000000014000480080002408000000008000140000000000900030073797a30002500004c0008800c00014000bc5c95b5d3b90b0400024000000000000000062000024000000000000000f90c00014000000000000000880c00024000000000000000000c0001400000000000000bff300000000b0a010100000000000000000300050808000440000000cd09437500f01100797a30000008000000000000000001140000001100010000000000100000000000000a13f8f6fd468f9ef08bc803f26c3ec3f5210e98c937b2d8aa91c49cd3c2ed559ef57eeb564e6cf4f46a01f3805610eb1d02ae89763cae785a0700006d430000008312928fcd0a4443a466126a9769a0e71e897ab48c78a14a5f5e6196e807d1d6960d178cf1d71a16000000000000000000000000000000005b35f7f0e9832295049c3dae47881e0c93ba5fc16bccd489771994b4f37c4e353dd462091300000000"], 0x1}, 0x1, 0x0, 0x0, 0x240408d4}, 0x40004)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

19:17:22 executing program 4:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x8c540, 0x0)
lseek(r0, 0x0, 0x2)
sendfile(r0, r1, 0x0, 0x20008)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x20})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10, 0xffffffffffffffff, 0xff)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1000)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000200)={0x8, 0x28d})
read$usbfs(0xffffffffffffffff, &(0x7f0000000540)=""/56, 0x38)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000500", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={r8, @in={{0x2, 0x4e20, @loopback}}}, 0x84)
r9 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
r10 = open(&(0x7f00000001c0)='./bus\x00', 0x8c540, 0x0)
lseek(r9, 0x0, 0x2)
sendfile(r9, r10, 0x0, 0x20008)
r11 = socket$inet(0x2, 0x0, 0x0)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
r13 = dup3(r11, r12, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000002c0)={<r14=>0x0, @in={{0x2, 0x4e20, @empty}}, [0x3, 0x8001, 0x9, 0x5, 0x6, 0xfff, 0xeab2, 0x100000000, 0x80, 0x10003, 0x2, 0x2, 0x1f, 0x1ac0000001, 0x5]}, &(0x7f0000000100)=0x100)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000440)={r8, 0x8, 0xfffffffb, 0x0, 0x40, 0x6, 0x8000, 0x10000, {r14, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0xd}, 0x4}}, 0x7f, 0xff, 0x1, 0x0, 0x800}}, &(0x7f0000000180)=0xb0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r2, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b)

19:17:22 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24060, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
mlock2(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080))
r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x400)
open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="440000000200000037a7036f98c32025070f4d766c845edf300b2ae911dba93fd012e289e3203f192fcef4b055a8893ad2bcdc8b52ef36a2f3c9de5533e17a36dd5357d3"], 0x20000)
close(0xffffffffffffffff)
r1 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, &(0x7f0000000300))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={<r7=>0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x2}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e22, 0x3, @mcast1, 0x9}}, 0x1f, 0x5a}, &(0x7f0000000180)=0x90)
syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x226000)

[  429.246121][T11518] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  429.344971][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  429.344989][   T27] audit: type=1804 audit(1583090242.585:166): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir285825945/syzkaller.7XHZ1c/82/bus" dev="sda1" ino=16801 res=1
[  429.446109][   T27] audit: type=1800 audit(1583090242.625:167): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16801 res=0
19:17:22 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fgetxattr(r2, &(0x7f00000000c0)=@random={'trusted.', 'vmnet0\x00'}, &(0x7f0000000700)=""/153, 0x99)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'vxcan1\x00', 0x8000})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001800000000000003a6292055aea458600000000baac0000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad1818d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326bcea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c6bab78a74dec8b1000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca00000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28)

19:17:22 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  429.658739][   T27] audit: type=1804 audit(1583090242.675:168): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/114/bus" dev="sda1" ino=16737 res=1
[  429.720028][T11521] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  429.826531][   T27] audit: type=1804 audit(1583090242.685:169): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir285825945/syzkaller.7XHZ1c/82/bus" dev="sda1" ino=16801 res=1
[  429.868302][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  429.900235][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  429.908676][   T27] audit: type=1804 audit(1583090242.745:170): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir285825945/syzkaller.7XHZ1c/82/bus" dev="sda1" ino=16801 res=1
[  429.927669][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  429.948396][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  429.958723][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  429.991350][   T27] audit: type=1800 audit(1583090242.745:171): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16801 res=0
[  430.012117][   T27] audit: type=1804 audit(1583090243.105:172): pid=11537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/115/bus" dev="sda1" ino=16881 res=1
[  430.014120][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  430.053430][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
19:17:23 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  430.082078][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  430.155134][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  430.180842][T11541] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 4095
[  430.210112][   T27] audit: type=1804 audit(1583090243.445:173): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/116/bus" dev="sda1" ino=16881 res=1
19:17:23 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x200100, 0x0)
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
socketpair(0x1e, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000000c0))
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000006c0), 0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

19:17:23 executing program 3:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:23 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:23 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x48}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640))
ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x188}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2b, 'cpu'}, {0x0, 'cpu'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'cpu'}, {0x2d, 'rdma'}]}, 0x51)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000140)={0x9, 0x1, 0x8, 0x2}, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="dcdb98"], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, 0xfffffffffffffffc], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
fcntl$dupfd(r7, 0x0, 0xffffffffffffffff)

19:17:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0x10)
r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
dup2(0xffffffffffffffff, r2)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x42041}, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xf03c25758f0eb0a5, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, 0x464, 0x8, 0x70bd2b, 0x25dfdbfe, "57a86f8ecce22e91e32c49b2ea", ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x39c0bc321394bf4e)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0)

[  430.870502][   T27] audit: type=1804 audit(1583090244.105:174): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/117/bus" dev="sda1" ino=16913 res=1
19:17:24 executing program 2:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x19}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0xcd3, 0x1, {}, {<r5=>0xee01}, 0xc70d, 0x8001})
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(r4, r5, r6)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000580)={0x3, 0x2, 0x8, 0x8001, 0x4, 0xa39c, 0x7, 0xfffffff7, 0x401})
r8 = msgget$private(0x0, 0x14)
msgctl$IPC_STAT(r8, 0x2, &(0x7f00000005c0)=""/143)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
sendto$inet(r9, &(0x7f0000000680)="90e54c0f0f", 0x5, 0x0, &(0x7f00000006c0)={0x2, 0x4e21, @loopback}, 0x10)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000700)=<r10=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={<r11=>0x0}, &(0x7f0000000780)=0xc)
r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/cuse\x00', 0x2, 0x0)
r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/loop-control\x00', 0x4080, 0x0)
kcmp(r10, r11, 0x5, r12, r13)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000840)={0x80, 0x2, 0x4, 0x800, 0x8, {}, {0x4, 0xc, 0x6, 0x94, 0x6, 0x3, "655e142b"}, 0x8, 0x2, @userptr=0x400, 0x0, 0x0, <r14=>0xffffffffffffffff})
write$FUSE_IOCTL(r14, &(0x7f00000008c0)={0x20, 0x0, 0x2, {0x0, 0x0, 0xfff, 0x1000}}, 0x20)
r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000940)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r15, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0x8, 0x8, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x74}}, 0x40000000)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000a80)=""/215, &(0x7f0000000b80)=0xd7)
r16 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0x80b04, 0x0)
write$P9_RVERSION(r16, &(0x7f0000000c00)={0x15, 0x65, 0xffff, 0x8000, 0x8, '9P2000.L'}, 0x15)
sendto$inet(r2, &(0x7f0000000c40)="56e12db2db49c3a50aa9ebe56629cf4c0cf009183d7cfdce4df93524c2ae03fbb9a35e546055c9bb99ccb7ae91e1d895ed2d84ad562f1954c2ec8fb12ac4817bb61d4600f4d4d4e78df25abfd4546b0e85db9180d2dbe82e7221875a1ef590ecb544d7babacc87055ddfe95b21208cbcccb4be653bb53b9f2f066ada37cbb5b3463b4a7346f0258f9a434a166cbc4adbe442c68000b1bd92adc6d41fe2a036a1007658c598c6ee92a793dd2ab60359ab9e0fdf84", 0xb4, 0x20000000, &(0x7f0000000d00)={0x2, 0x4e22, @rand_addr=0x2}, 0x10)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)

[  430.968129][   T27] audit: type=1804 audit(1583090244.195:175): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir224817648/syzkaller.R8swaT/98/bus" dev="sda1" ino=16945 res=1
19:17:24 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$USBDEVFS_GET_SPEED(r1, 0x551f)

19:17:24 executing program 1:
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010200000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d89e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27ad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee452e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd644b4a44b807c9765cc7ef43c3cc0a6ad3d3976656d475dd2ed789004be03884e042acd2e35f09c7a1f97f9561f62837e1d38eab98e6a7285bb0c6c190b9abc4b5705eb1073fe63e88f6ff7e510c2795288a69aa52ff32a89c9bd496d5d61d02cd952aa6226b3098ec9215fcf5becbfd7b53b4c65b74873ae66ba6d7376bc7354c34a49c042125d49ac436ffe132d9c1a6387e727f033a1c826c168fa5af31afa37d533a71b70a3fa9a264a9f32802f68343d4272d11e557a9419461864a0043b6121646cf2e2a7709fea8c226444cdccb045fe8015d399dbde39f6b3294bec68ddbb1eb12d48bdace9b339bc99f2274ae621edefca16fbbb75d53b1097ab1f8bcf81e7b949ef7e5b24639f4bbe0c9854cf403bd90e81b4cf87938e1a7c0efc690af72961c3366c5dc70a6df2a4b00"/877], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795ecaffff8100ffffffba000000ffff08", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28)
syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x800, 0x200801)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7f, 0x2}, 0xc)

19:17:24 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x1)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="c8"], 0x1)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x2000, &(0x7f0000003000/0x2000)=nil})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

19:17:24 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000d78343d1a6636aeb40c16037fe3b4d4319bbf36ae85b3d780ec61cacc3a5ba3d4629f482297da4687a43b7f6fbb206d2e4da0de1dfeb24e2027cc7a83af59331b785362a959bae0941cdb67087ada90ebc7252c6b5f681d1f6335f2b16f0f85b00"/125], 0x1}}, 0x0)
lseek(r0, 0x8, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000340))
unshare(0x60000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00')
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
fchdir(r2)
ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000200))
sched_yield()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in=@broadcast, 0x3894, 0xffff, 0x0, 0x0, 0x8, 0x0, 0x80, 0x2f}, {0x2b7b, 0xffffffffffffffff, 0xe9, 0x0, 0x8, 0x800, 0x8000}, {0xfffffffffffffffb, 0x6, 0x9}, 0x4, 0x6e6bba, 0x2, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7}}, 0xe8)
open(0x0, 0x0, 0x0)

[  431.538420][T11607] IPVS: ftp: loaded support on port[0] = 21
[  431.764791][T11609] IPVS: ftp: loaded support on port[0] = 21
[  432.041037][ T7793] tipc: TX() has been purged, node left!
[  433.351057][ T7793] tipc: TX() has been purged, node left!
19:17:26 executing program 1:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$user(0x0, 0x0, &(0x7f00000000c0)="92", 0x1, 0xfffffffffffffffe)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0))
fstat(r0, &(0x7f0000001500))
r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x410400)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x7d, 0x3, &(0x7f0000001480)=[{&(0x7f0000000240)="cf96cb3c44ed891e4544242f21bc5832a2422ed047d38ac20846d7c3bc497a17320b2ceaeddbcbcb5826ebc92f4f96cf16a374459f029c4a6b800dddbd9976a4f83ce0ee028fa0", 0x47, 0x2}, {&(0x7f0000000480)="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", 0xfffffffffffffe7c, 0x3}, {&(0x7f0000001780)="a3466c31c92c8b70e84bccf0d77a2e1858f800d638183e49627537b28b167c36445f10eb8eef3b9360031070f63a3798ef5b6b2ab788621a19563bd56e555df7f7fffb21b731413d08985528ad595847c4", 0x29, 0x7}], 0x244000, &(0x7f0000001a00)=ANY=[])
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000140))
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x5890, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)

19:17:26 executing program 2:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000000)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getpeername$unix(r4, &(0x7f0000000600), &(0x7f0000000680)=0x6e)
r5 = open(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101001, 0x170)
recvfrom(r1, &(0x7f00000000c0)=""/49, 0x31, 0x40, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000340)=""/196)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x401}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x8, 0x8}, &(0x7f0000000280)=0x8)
renameat2(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000100)='./file0\x00', 0x2)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x130}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf25130000000c0003000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x60000)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="f92800000000000000000e00000028000e00bb49a416c2cae9bea3a101ddd292762ec50cee58d55eb0da9779f817342fc03a341a48d096fd1c5cd6dffc8392864c0800a500090000003d76977927041172bd877c0551791b6b8f54a3cbae3f6f6b28268782327a77ea63e4823b116a0c12ec4b1b1d2d39173533936408edb107867e4b07fe39fbf8c9e55c958e0cf8f4e6059ffbf3b40b2cd1f0446de2c28a11b1f448cd611626aaf1af055334a8e92481af45383c6b78cd2083b294687db6124991f4860acdc2854d7ebeae299215e22e63aaeb8c35f52285e10552b0651007200178def62387e20196c9bf"], 0x44}}, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r12, 0x0, r12)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f00000006c0)={0x3, 'macvtap0\x00', {0x80000000}, 0x2})
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r11, 0x1, 0x70bd26, 0x25efdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x40014)
r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm_plock\x00', 0x220000, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r13, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x104, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_NAT_SRC={0xb8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2e}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS={0x8}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008800}, 0x800)

19:17:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3815b0cf7a8a3e73c1a2c8aaee93c1000000241432061ea0c01e298644277e256d686b45bc92e2800b505f3448c1d9cf91add0e67c1f9e59f9545aa6856969285dec1397e1594e1ea05014d4b966157cebf3c1863561bb1f9c8a1d29a8592b99aaba9b497d4f1b057e0f81a9637129c0c64aca44eaf8b2465ac1ab27df9d1562de6977fbe25da76c52b630bb60fe17d8f9fec26b8ef1b5f3431b643c28af19396a74dcdca3f33029622f89791bbbbf97041e94300f4d175f89f0eb26f4b7755a47fa29e0b530750000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2c}]}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f0000000180), 0x27a4eaa51029717, 0x0)

19:17:26 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:26 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x32afb951727b9e5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x2bc, 0x1000000020000000, &(0x7f0000000080), 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e3, 0x7}, 0x20100, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}, 0x1}, 0x1c)
sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_names\x00')
dup(r1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fremovexattr(r4, &(0x7f0000000280)=@known='trusted.overlay.redirect\x00')
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x70, 0x1004)
fremovexattr(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="747275737465642e747275737465642e6f7665726cce7956192e72656469726563740075dedd821f091c3d17f084b44a0cfd48dafa095c02471a2c2b53381f87b8863d8418f37d3f9397dc61a4b571133ededc830d0d62f6992f402af28897b361b41177034cbcdf2551ac17738011699af04e19f8675d8a060d2e6a05d3a4da37986ad6d747d3254d1eaa4942040065ce603681f6668d06ddfd628cd7bd5b998b85c7054c9caf0fb2e89f0887774ff1a51d0e1cc25a1905b302bcdae08d1329a42429c2460429cd959c7d0577a27379dcc50dd964f2da42dd63aba8996f26265605ac324253aa582e2b3198ec548ce49528dd98b6d5f6d71690af7de32f75b502837f0ff89b84c3c360256a068c783cada0a856d3b67736f1a9463f9f2d054cc4159b8d4df0adf9b3f64cfa43c1c3fa4cfd4a15eda35e8ea2eb083c5752e238daa0f8f7e644512aa5cc0b209795fbca83c2b6639a9c7e71e66f4278896ff5d3d86f97d4913bd1345e9b000000000000000000"])
dup3(r0, r5, 0x80000)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x803f00, 0x3, &(0x7f0000130000/0x800000)=nil)
pipe(&(0x7f00000001c0))
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002f4000/0x2000)=nil)
socket$inet6(0xa, 0x3, 0x6)
r7 = getpid()
sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
getpgrp(r7)
syz_open_procfs(r7, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0xff, 0x93, 0x1, 0x141, 0x0, 0x3}, 0x0)

19:17:26 executing program 0:
connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffe3)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x8, 0x7fffffff}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
inotify_init()
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0xc0000080)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SIOCNRDECOBS(r1, 0x89e2)
inotify_rm_watch(0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
r4 = socket(0x27, 0x800, 0x8)
connect$l2tp(r4, &(0x7f0000000180)={0x2, 0x0, @empty, 0x1}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000294}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x24001040)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
accept$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10)
r6 = socket$inet(0x2, 0x7, 0x1)
sendto$inet(r6, 0x0, 0xffffffffffffffd6, 0x24000810, &(0x7f0000007640)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r5, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)

19:17:27 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x8000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000012c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000020c0)={'wg2\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000021c0)={&(0x7f0000000040), 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x68, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000895}, 0x20000000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002200)={0x2, 'gre0\x00', {0x101}})
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000002240)='/dev/zero\x00', 0x40581, 0x0)
getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000002280), &(0x7f00000022c0)=0x4)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000002300)=0x1000)
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002340)='/dev/cachefiles\x00', 0x4001, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000002c80)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c40)={&(0x7f00000023c0)={0x848, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x803, 0xe, "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"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x6b}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x3}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x848}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r8 = creat(&(0x7f0000002cc0)='./file0\x00', 0x23)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000002d00)={0x8, 0x4, 0x5, 0x4, 0x1, 0x6, 0x8})
ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000002d40))
r9 = pidfd_getfd(0xffffffffffffffff, r8, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002e80)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000002f80)=0xe8)
sendmsg$inet6(r9, &(0x7f0000003200)={&(0x7f0000002d80)={0xa, 0x4e23, 0x99fd, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002dc0)="c4f6afeb691c5e3af64535b93710cea7f9649cc159c9d7ccc4790ed3af35fd8be6497376606c9412ed2f97ce19d7236d186468c85c6e25bff64074cd6e1bbcb4093334b3b46b924f99ac2fe8de24a7079c7340877110fbf916ff601a5384b5aa", 0x60}], 0x1, &(0x7f0000002fc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8001}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts={{0x20, 0x29, 0x37, {0x87, 0x0, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts={{0xc0, 0x29, 0x37, {0x3c, 0x14, [], [@generic={0x2, 0x9e, "3a53960ff131991111d4c800e8e4dbc55cd12c0befb538978e389ff684afd17eb53ec23143113761cbeceb0e28a2299b0ae43d729520589e575a12a157acb195ae375e1aa63c150c240733d7573eaef15e9725c4ce4b28d86a3a2ed72139c0b2e7fd09ed5ac8ef2651abd72c53f8668d76bbbcd3f028f4409b2796c1940910a3541dc9bdeefdd1fa0b319eefa8c5c9a85916b1a442462871aa18aa609229"}, @enc_lim={0x4, 0x1, 0xe9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r10}}}, @hopopts={{0x20, 0x29, 0x36, {0x84, 0x0, [], [@enc_lim={0x4, 0x1, 0x71}]}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0xc, 0xc, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x27}}, @enc_lim={0x4, 0x1, 0xf9}, @generic={0x0, 0x3c, "39604e3c9ceac315cf52950f04e7f79784a29470a57817d847cf5ff869ad94726a73ef33ec4a242939882cd51aef48bbe9f528060249830a4e9aecc8"}, @jumbo={0xc2, 0x4, 0x5b30}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x208}, 0x44)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000003280)={0xa10000, 0x5431, 0x8000, <r11=>0xffffffffffffffff, 0x0, &(0x7f0000003240)={0x990a5e, 0x400, [], @ptr=0x5}})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r13 = syz_open_dev$usbmon(&(0x7f0000003300)='/dev/usbmon#\x00', 0x0, 0x200041)
ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000003340)={0x8, 0x5, 0x7, 0x0, 0x0, [{{r12}, 0x7fffffff}, {{r9}, 0x50}, {{r6}, 0x1b}, {{r9}, 0x8}, {{}, 0xf91a}, {{r13}, 0x2}, {{r0}, 0x1}]})
r14 = add_key$user(&(0x7f0000003440)='user\x00', &(0x7f0000003480)={'syz', 0x1}, &(0x7f00000034c0)="2e6714bf57dc7a381af27e29a7edd8f86f038c622d200c7b821364fbfd2d1e995ccd589351c19d7a109de516e95eba49107c8bb8f4dc9499bda1f693bd1f17805136cd4fd8b10260692f0e7b3100c798cd1a35f203c540f65cf1e2adcabc1bb5af8e53ca764542919b36a95862c90952903fe0aa2bda62f064eb1b763a3f25ced55288386f0ed6505661e23e89419f37c2c3dca75f70edb3e39f540096a42f0fc4df41c35620c9a5854ea86c90815ed70a22c82abe426dc32117a37a53f0bcc37953f01e5a8110043548c19e18dcba4ff8", 0xd1, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000035c0)={r14, 0xa, 0xf2}, &(0x7f0000003600)={'enc=', 'oaep', ' hash=', {'crc32c-generic\x00'}}, &(0x7f0000003680)="ea22b74565179c75ee04", &(0x7f00000036c0)=""/242)
r15 = openat$nvram(0xffffffffffffff9c, &(0x7f00000037c0)='/dev/nvram\x00', 0x20000, 0x0)
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003840)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r15, &(0x7f00000039c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003980)={&(0x7f0000003880)={0xe8, r16, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}]}]}, 0xe8}}, 0x20000001)
r17 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000003a00)='/proc/capi/capi20\x00', 0x101000, 0x0)
ioctl$MON_IOCT_RING_SIZE(r17, 0x9204, 0x483ed)

19:17:27 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f0000000140)="d8", 0xf000}], 0x3)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
getpgid(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0)
listxattr(0x0, 0x0, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00')
lseek(r5, 0x20400001, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000000, 0x1012, r5, 0x0)
write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={<r6=>0x0}, &(0x7f0000000200)=0xc)
r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10a642de245f76f7}, r6, 0x0, r5, 0x0)
dup2(r4, r7)
ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x80)
write$P9_RWALK(r8, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r8, 0x0)
r9 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r9)

19:17:27 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x81, 0x585000)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xf80, 0x2)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000180))
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840)='/dev/cachefiles\x00', 0x10d440, 0x0)
ioctl$sock_FIOSETOWN(r2, 0x8901, 0xfffffffffffffffe)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000880)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000008c0)={0x1000, 0x8, @name="f1c9fe985755f44615174a0ea2a245fb9db0f5f21fba673ae4288a6e408ed855"})
recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/227, 0xe3, 0x42, &(0x7f0000000a00)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x9, 0xe5, "c30abac4b9a3adbcbf9db21f47d815a8b3bea1569ae870391ed7870916dfda50dd8c0b3c10afd18b31819bba8aab2a9772b7d94759deb094035b2b52bb9bd3", 0x12}, 0x80)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/bsg\x00', 0x8400, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000ac0)=<r5=>0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b00)={[], 0x4f, 0xfffffe00, 0x8000, 0x558, 0x2, r5})
socket$pptp(0x18, 0x1, 0x2)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/full\x00', 0x0, 0x0)
ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000bc0)={0x2})
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000c40)=0xffff, &(0x7f0000000c80)=0x4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/schedstat\x00', 0x0, 0x0)
getpeername$l2tp(r7, &(0x7f0000000dc0)={0x2, 0x0, @initdev}, &(0x7f0000000e00)=0x10)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000e40)={<r8=>0x0, 0xfffffffb, 0x7, 0xa9fb, 0x0, 0x0, 0x2, 0xffff7fff, {0x0, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x17}, 0x80}}, 0x21b4859f, 0x2, 0x7, 0x6, 0x3}}, &(0x7f0000000f00)=0xb0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000f40)={r8, 0xfffffffc}, &(0x7f0000000f80)=0x8)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000fc0)=0xd8, 0x4)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/consoles\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000001040)=""/75)
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
syz_mount_image$vfat(&(0x7f00000010c0)='vfat\x00', &(0x7f0000001100)='./file0\x00', 0x8, 0x2, &(0x7f0000003140)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="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", 0x1000, 0x6}], 0x400, &(0x7f0000003180)={[{@shortname_win95='shortname=win95'}, {@rodir='rodir'}, {@numtail='nonumtail=0'}, {@uni_xlateno='uni_xlate=0'}], [{@hash='hash'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@subj_type={'subj_type', 0x3d, '-+)}][eth0]-'}}, {@dont_hash='dont_hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, '^selinux*!cgroup+ppp1-/]'}}]})
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003240)='/dev/hwrng\x00', 0x30000, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x0, 0x4)
r11 = dup3(0xffffffffffffffff, r6, 0x0)
setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000003280)=[{0x1, 0x2, {0x3, 0xf0, 0x1}, {0x2, 0x0, 0x1}, 0x2, 0x2}, {0x1, 0x3, {0x0, 0xff, 0x4}, {0x2, 0x0, 0x3}, 0xff, 0xfd}, {0x0, 0x3, {0x1, 0xff, 0x3}, {0x3, 0xff, 0x3}, 0xfd, 0xfe}], 0x60)

19:17:27 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  434.232954][T11650] Unknown ioctl -2145357807
[  434.348718][T11650] FAT-fs (loop0): Unrecognized mount option "hash" or missing value
[  434.356807][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  434.356826][   T27] audit: type=1804 audit(1583090247.585:181): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/120/bus" dev="sda1" ino=17058 res=1
[  434.473410][T11657] Unknown ioctl -2145357807
[  434.538552][   T27] audit: type=1804 audit(1583090247.735:182): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir843751979/syzkaller.oJN0vF/107/bus" dev="sda1" ino=17057 res=1
[  434.575807][T11650] FAT-fs (loop0): Unrecognized mount option "hash" or missing value
19:17:27 executing program 2:
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000340), 0x0)
r1 = syz_open_dev$vcsu(0x0, 0x1, 0x3f3881)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2010, r0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000007280)={&(0x7f0000007180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6cd14607c8bcf273}, 0x20000001)
ptrace$peek(0xb8bcf7b2134d466b, 0xffffffffffffffff, &(0x7f0000000240))
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x401}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r4, 0x9}, &(0x7f00000000c0)=0x8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1)
io_setup(0x0, &(0x7f00000004c0))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
accept4$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800)

19:17:28 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000400000084)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
readv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1)
shutdown(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = accept(r2, &(0x7f0000000040)=@tipc=@id, &(0x7f0000000100)=0x80)
ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000140)={0x0, 0x80})
write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x4)
connect$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
close(r0)
getcwd(&(0x7f0000000000)=""/10, 0xa)

[  434.724357][T11669] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  434.748590][T11672] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
19:17:28 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0200600d698cb89e14f008001fffffff00004000638877fbac14140ee934a0a662079f4b000987e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)
r2 = getpid()
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000007480)='/dev/btrfs-control\x00', 0x4100, 0x0)
sendto$rxrpc(r3, &(0x7f00000074c0)="e55515a17f9f22c526f91f098f4e307d87d50e92dc0c01ad5d71cef5b630f5f465333d6850919dc436f35f508ddc92f5495df35e043ecabffdb2c366f921eafd522911affb95d340866ae797d1b2965c0fa30b7b64be64b7e555de7a4c80d60e9255feb1787e901edc9d268fbbbee50e6a829b5c433b8aa947b3c84a0d34fac7eb64371c2794b8c073ee4b86a22678a79853f995a90983b92308a4e749929fb110d98c7afbbcafc6e55427464672b3de8374b55c780835a0d6fe3c2b2f12134ee35eefe20fc17aed", 0xc8, 0x0, &(0x7f00000075c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x10000, @ipv4={[], [], @rand_addr=0x3}, 0xd61f}}, 0x24)
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
getpgrp(r2)
ptrace$poke(0x4, r2, &(0x7f00000001c0), 0x83)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200000, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000140)={0x2, 0x70, 0x7, 0x0, 0x7, 0x0, 0x0, 0x5, 0x61024, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x1004, 0xfff, 0x4000000, 0x4, 0x4, 0x7ff, 0xd826})

19:17:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
dup2(r1, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0)
pipe(&(0x7f0000000200))

19:17:28 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:28 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0), 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@rc, &(0x7f00000002c0)=0x80)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x7fffffff, @local, 0x78d}], 0x1c)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="2a450e71", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @rand_addr=0x7}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000340)='vxcan1\x00', 0x0, 0x2, 0x1f})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001880))
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000014c0)={0x0, 0x4, 0x6, 0x20000, 0x8, 0x6}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00')
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x76006e)

19:17:28 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="d4ece378", @ANYRES32=<r7=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r7, 0x401}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000200)={r7, @in={{0x2, 0x4e22, @broadcast}}, 0x2, 0x8, 0x8, 0x1}, &(0x7f00000000c0)=0x98)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
open(0x0, 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ftruncate(r8, 0x7fff)
sendfile(r4, r8, 0x0, 0x8000fffffffe)

[  435.391815][T11698] ubi0: attaching mtd0
[  435.408590][   T27] audit: type=1804 audit(1583090248.645:183): pid=11700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/121/bus" dev="sda1" ino=17059 res=1
[  435.434594][T11698] ubi0: scanning is finished
19:17:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
membarrier(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$tun(r0, &(0x7f00000001c0)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xe, '\a\x00'}, "8cbfc12abc282c27820fd9118600820ef601000000000000940a5a17e89fb5f1d3debc8540002b4ef424297d1138b27a369d0b112b33df4c366b67856c210a24c3df6373d0ca47c3c2885da770edbd1ee5bde967a600000000000000"}}}}, 0x8a)

19:17:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x4}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000003000000019d670052322f1effa3c24f662b27cb10333fedfc5b9b4b2298cc7b97c7e7ff456509379b82c85fc70d4519fc0bb9f3887561dca2b9a19f1d0efecfb50b90be3cc71854b9386c97329cfce11d04ff9e475de531f05f4149bd0d89e666d1da5a3e0680fe4979c76f03e82a"], 0x73)
fchdir(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$packet(0x11, 0x3, 0x300)

[  435.450329][T11698] ubi0: empty MTD device detected
19:17:28 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  435.559969][T11698] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  435.599515][T11698] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  435.641117][T11698] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  435.651211][T11698] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  435.675709][T11698] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  435.721135][T11698] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  435.775426][T11698] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 935297722
[  435.820812][   T27] audit: type=1804 audit(1583090249.055:184): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/122/bus" dev="sda1" ino=17061 res=1
[  435.831161][T11698] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  435.888506][T11709] ubi0: background thread "ubi_bgt0d" started, PID 11709
19:17:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240)=0x75, 0x4)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1)
r1 = syz_open_pts(0xffffffffffffffff, 0x200)
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000))
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

19:17:29 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  435.932430][   T27] audit: type=1804 audit(1583090249.105:185): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/122/bus" dev="sda1" ino=17061 res=1
[  435.949090][T11723] ubi0: detaching mtd0
19:17:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x34, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x20, 0x1, [@m_connmark={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}}}]}]}, 0x34}}, 0x40001)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000080)="6ff34afbd9736e4002657624d31fc2ff2268f090cb96c747db6ca1214d5a2ea432f026eaa0ff100861c6bd9f187de1f5660eb6ac4cd04b69ca8ed04a62c0cca056db245489049de92c4c4e3d219ccc065b440c2a8f4e79424384dc91b0e0b5c047ca3ff5a78b0fc368ef609c3e3e326ce932a604d6a77f1bdff9", 0x7a, 0x8}], 0x8, &(0x7f0000001380)={[{@gid={'gid', 0x3d, r1}}, {@umask={'umask', 0x3d, 0xffffffff}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@disable_sparse_no='disable_sparse=no'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@disable_sparse_no='disable_sparse=no'}], [{@pcr={'pcr', 0x3d, 0x1}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@appraise='appraise'}]})

19:17:29 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000100)={0x6, 0x2})
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10002, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x8, 0x0, 0x9, 0x6, 0xf265, 0x9, 0x0, 0x2, 0x1ff, 0x3f, 0x1, 0xb50, 0x200, 0x1, 0xb84f, 0x0, 0xed, 0x7fff, 0xfffffffe, 0xfffffc01, 0x8, 0x5, 0x4, 0x1, 0x2, 0x6, 0x3, 0xae8, 0x100, 0x9, 0x1, 0x1f80]})

[  436.159968][T11723] ubi0: mtd0 is detached
19:17:29 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@remote}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x4, 0x40, r5, 0x1, [], 0x0, r7, 0x8000, 0x0, 0x3}, 0x40)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r8, 0x0, r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)
fcntl$setflags(r9, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
io_setup(0x6, &(0x7f0000000140)=<r12=>0x0)
io_submit(r12, 0x0, 0x0)
io_getevents(r12, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000200)={0x0, 0x989680})

[  436.295102][   T27] audit: type=1804 audit(1583090249.535:186): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/123/bus" dev="sda1" ino=16969 res=1
[  436.390887][T11743] ntfs: (device loop4): parse_options(): Invalid uid option argument: 0xffffffffffffffff
19:17:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0xd50a2, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x13f, 0x3}}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
fcntl$dupfd(r6, 0x406, r7)
r8 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r11=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r11, 0x30, 0x0, @in6={0xa, 0x4e23, 0x33, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}}}, 0xa0)
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60000)
r13 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f00000001c0))
ftruncate(r13, 0x200004)
sendfile(r1, r13, 0x0, 0x80001d00c0d0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0)

19:17:29 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:29 executing program 4:
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x2a, 0x12, 0x2, 0x15, 0x5, 0x2, 0x0, 0xa6, 0x1})
r2 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0))
ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8)

19:17:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30}, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x2f5}, {&(0x7f00000023c0)=""/49, 0xfbe3}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2f810200, &(0x7f0000000240)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="7d000000000000001800128008000100736974000c00028008000100", @ANYRES32=r9, @ANYBLOB="e585cf6c7941a84b484d112fec0ebc1b30a217af8622e9c2235be6e4fff048f9888f5fc45e0c8bc4332efb2bb52d50aee563694e111e4865147f3ef8"], 0x38}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2f810200, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="8008000100f36974000c00028008000100"/28, @ANYRES32=r12, @ANYBLOB], 0x38}}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x2f810200, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r15}]}}}]}, 0x38}}, 0x0)
r16 = socket$inet6_tcp(0xa, 0x1, 0x0)
r17 = fcntl$dupfd(r16, 0x0, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
accept$packet(r17, &(0x7f00000011c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001200)=0x14)
sendmmsg$inet(r4, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="7245e3a4c0f05744be1bda38459f4367014dacb26cd595645921e989dd98903179b78bbb75515036b80e2f0b94098923e5eef6c83b139dd9088e5fbe04f2c712043708348155f3433a29af8ec53ded44e289bf65a900139c825f6ae3fc26e990c118bd5e2216727972ba6fe080c1efb833662871d508b923dc7e1fcc5aeff607821686b6d49c0f4b1b1c906b259247a20df206ec8ce7869feb1ac9de154a7099eb785677c2a97637", 0xa8}, {&(0x7f0000000200)="808e0497eeb7bc8df28bfafce3e3b2ce505139d0b07888d879a0febde32090cdc5548a30f16f29c1c3527f3957c79b6118ae07cf3bb4ea698610871be67d1356d0958869237b2978e2509d18f54dace7c5e9e9a961edfb8965af966ff4dd24e543f86f8e7a882c92e4059ae852ea12ee2824733fe9d28a42b493270ff11625a9ed80a813f6e602e6314b", 0x8a}, {&(0x7f00000002c0)="b366240b3210e0ec2ca87e464713a8a39130abf673052bc181bbcdbc91298ab4502fb45fd1d2cb57795dca8277e4776d76307188d41e90e2bd6fb227db43d9c4bd8564300b6bdb10643e696b7d7a21e3b8c113ef21391c10bb074c1450d2a06c5d455fbc", 0x64}, {&(0x7f0000000000)="5b0c6e80f6a519daa62c50992f2e12", 0xf}, {&(0x7f0000000340)="4a252cd49c871f02abecdc3bc34a2cc29d57c6de803261b2ad84799c618f64517dcaa9c8a94ef7f0d1ccdd5644293297fdb0d01d4772eaa6352145fa9727f55fcbd552e4951763374c4d94ed", 0x4c}, {&(0x7f00000003c0)="519c68bdf359487e1ef1b913c44c6d674faf9407ad5f40fb1757cad3d880d9a5d733fba05aa955c48fce9d48b831437424fbff9ae63478f10e3ca6a663d3d5fe4838e56a0a2cdb0a600f537d09bac55c2c8e3d661409126aa25a4f4adc6cae9d0765608dace86d48d02b67f9ff1439cda5260f37580c48d08f5fb94e2164500a9a492a27782c7992d2ec90f93a948ec0fe5b07a47e1a532972178017e1e94b2047c33b", 0xa3}], 0x6, &(0x7f0000000500)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xeb, [@rand_addr=0x7, @multicast2, @multicast2, @rand_addr=0x80]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000580)="97a40fe0d17ade699368117bd7339e45d7f56a13803df1709ee737259eea3db8a3e75d046f1336906a30136db54397fb5acdb16fc1ccdc9885b21e5fdf8ef3b8f03c2b31ed420b4d94fde6ef272835066a42618be51d1f5e087249cf99f64d1f94011d5ff1e64b4f886df75f8d810f22011bf605650d3b2fcdf75027c01b3507222128b647d43d66b21bb357b5f3ecfd83fdef8f879d47b96ae736ca99496627943a575abe538b6c3efe0c57e7dba35e68fe5ff6384c39f6345a360c807a765561912df8f7f8c3091a80ba687da24f", 0xcf}, {&(0x7f0000000680)="e5591d0ef41d0daacddc147fccf7f4f8660a496ca4f7c5c99a4faf4f4c0e6e262c8c772007b5e6fa60279831848c1c0bd37f3ea297d8783ae0bdfb568ca7f07b5cd1f4c19b1885a42318c7ec8371e64452af723dc1cd7ff9f3a6a6949057924913ad9e9f424987387d5d93e21834837acf5c5b9e07a0e3b174bbb7a56d74ea51efd8b667df6cddf94e63bad0f0de5461323358c37363883b0a4680691394917ea7528136e0e3777eccc334df66a53964524253fafa00967049ed907e0f", 0xbd}, {&(0x7f0000000740)="401a705b998ad41a6a62ecbda04b3e7f15475a5b75c89310be69c53aa30f7c58ca26f8070cbdafb222075782c1d7d6590c9b9cdfaf0ccc32a36ff2ea84a2306bf23c4c75017dcf77ad48a6e3b658ca92603fa867eb61cbabb2323ca22cb5653dc89172436bb831926ec05ee6a858563eb58b45c6416c06f095a951c0aab106afdec00f37dc2b6638393cc49fd4a6fa19ed74510ba38464a6ebe6549557c787c1da", 0xa1}, {&(0x7f0000000800)="3734ed71dec07ad08b480def4fabe134f45aeb3f1e8706dc265e4a7d5441e9c83b321c62435fcae4750518fa32c15394d073d5ef7426965916c8d4bf75b3704934124abf61a831be22b77cef831766b7c74b138aeb8206ccdbc173ebd4140f2f927fb2b4d0287c8436ffcb7bd32e5d7ba92e87ba0a928b21c30a8e9f0afa6579b97e3bdce0575f1259381199b8bb0c4456952aa712b088", 0x97}, {&(0x7f00000008c0)="f3cc5e72a9d70f7d031d5a638b27f2a7c45922391189dbb49982ce623b92e13956ba22e7ddf021554801754b7ca2c9c0efbd9886e5fdafa9b73dea559b01441056b534eed87fbd76c73cfd1523c8150b4233a7d5b8d341f7ac20a1b6de1457fc64e0730a834629b02f31820066218c4bc0eecc24cb268ffcfd88c08d0fc7dffa6f3a7bc7cbe9eadb554c66b7b98b68426a1efc92e380a0b46cfc1f3eb5568b658075cb2682efad5517f8083b131acafc0d266fe8f03216b30b3e65073dc115b4018f9d", 0xc3}, {&(0x7f00000009c0)="014e8390e77f651e015e3b42482fb217cf7631277087cee9f82150bb5489953de78627d51dc4637c00186cc0d263bed9dc41b9452360c173a7ebb6b8ec39f2ed27cd14f66a478fef0dde27450fb26ca4d8a5ed4c0aebe19ab7424805749295ab13afce04e5bb20dcde1fb96b017c4252b9b566066b3a8620b24619bae3908ef2ba5e5cda4442d85dd91b6a6351d0cd888b89a96aacef00a86b46773470f44ab950106f5969489a94", 0xa8}], 0x6, &(0x7f0000000b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0xffff, @broadcast}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x5d, 0x3, [{0x5, 0xe, "9ffd863a66b2fcd3173906b3"}, {0x0, 0x10, "e466295f9a0e54025e7588ec7b30"}, {0x0, 0xc, "035fdf145c22a8e531ff"}, {0x7, 0x11, "5365a71a69f97d31c4df5c36a8ec0c"}, {0x6, 0x12, "8c1cecbcb3ff0fd26161f8ac7ae47937"}, {0x2, 0xa, "c84f0fdb5a5377cb"}]}, @ssrr={0x89, 0x2b, 0x40, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x1, @remote, @rand_addr=0x2, @loopback]}, @ssrr={0x89, 0x13, 0xda, [@loopback, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x12}]}, @lsrr={0x83, 0x7, 0xd6, [@rand_addr]}, @lsrr={0x83, 0x3, 0xed}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xba, [@rand_addr=0x8000, @rand_addr=0xfff, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x180}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000d00)="e18caf40ab25162cfd5114d61d5b1216fd34f5cc5c21f35b1898a2153dbd7ffa00fe327d0b9dfed78f3b4b61c3ec2dda6daea2540d2e79ebb83a252622ee362280e94493a41e0441ec9b45ca5133f2f3f579d73d44dab58f3b22528585", 0x5d}], 0x1, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x68}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000e80)="81ea5b966907bd28d9ff5a85392e14ac87b2aed7c4e8e60db6127e522c352db4271089a800b6532b1ae9d8d215593599a5ada00d229a10553cf62cab4edb904b5b9e97766ecb159a2f03df08cef971ece0f62e49a9ecfa5e585b439cb58220b41830b4356f8ad60d09e8ee37afd9385b08071c1b98a3d9690f", 0x79}, {&(0x7f0000000f00)="06356afc43dfc7d0d0fa0a418c309d8c78299b0921206d46c3321cbe574126e3d77bb7ddc5940ae1539835a40b48c178f94dc2df6bbbbc78af312116707a6c495cfadad98a9deb2cefe0f0bc464f6ad3fff8528fb6f3383264da9c876ece8d29c46c78f4dbbc823da95ed97852802e1f", 0x70}, {&(0x7f0000000f80)="0748bfcb542f9fda5e0746ded872c25b", 0x10}, {&(0x7f0000000fc0)="985a4a5d59f08f396890115106f39fec398ec876bdf16be1363f2f7ea8d8e248bc", 0x21}, {&(0x7f0000001000)="84e9000d4ee0169353d8a10629e746ab48287c9fccbd70d1e4d0dcc5db12bfb1062f9ca786a23808c02fb13707bc31b20d5a5b9ef0fd37c397205396394bf3dd55ea89108e0d3d3f6721963f35d9c9242b5ad14b363b2c6639cd773efc0b95af91ecc3e3e65d4c46a0005eff52b8dd656c74b62f0d5350bca11d4c94cbd743f8f3b171e99bf26fc3bee769d89328e63580d67de33c6e620881619fd342fe0e578c0789046a8721cb6e866dfcd3eef32013de5a591eb362fa57f37afc592f6cba67edc97cce29a7c551b83835c76fd22bee3ee5a44a0a957da1b024f520099394", 0xe0}, {&(0x7f0000001100)="52dc10b6b72f6e6144ebd05dfad9ef47a9b9da06d6afee7b128ba37a49b564383a989525cd27875b24bdf58f41ef95c79377d7827c2dff0e5f717fa5c6bd484bb0b8dbc320d6b8817c014b012430af6cff6d4bb0ba8142", 0x57}, {&(0x7f0000001180)}, {&(0x7f00000013c0)="dbe659b5232a2c4c701fd2026efe33d9eb0bfc0862ba426af38e3120e8368f1d4f4543aa1e4c9561ffde7a174b1ea6a505cde3ef8e3438dc92fc9ef676c183f2ff9b789538db4cc1a981137add75c33e574b0cb48651758f78d7181e0e03b3bc4289be6b1bec489b648a69bcefdba2e7c09bbb687570bc8cc7b26634cca3e8fd62a00ff8e696ddfe037914e7431d628978bf2ff05fa5a55ea2164d42171b0708d0fa87a71d4357575d0c6ce06dcf3bb4aa546cc49b380a9190b90b4d71dbb04eb6203eb27cb9d2586666e1b344ef7d17d02333c5635c019dc20243dd62665369ba4216f5b3e820938476bfdab3a11e", 0xef}, {&(0x7f00000014c0)="8e2a892b9d1f0680d919d74ba85b14c0e8d48f7e9cb7ae212e539a96e781e047c890f553a9d52553678f7decdfb8c3eb184ae8784e964395945b072ee1d845cbe510688f1e7a32dca356290bd0add5a1746a92c73df90c4333a6b2a874914d5b3a6993709fe4e1fc184dc5d0531828e15c9ac2c391dcb10f164df7d828de1714d5f5a747528168dbc865c8858a33d4847ea1c5c1b75d8c26b1b9eda909557118d01c4b36537e1b4f0de0bf8715553aeaa9cbe2cf6963450cefe16bfd5087de4dddc4157f", 0xc4}], 0x9, &(0x7f0000001680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @rand_addr=0x30, @local}}}], 0x40}}, {{&(0x7f00000016c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001700)="feb20a210101b68147e5fd28a92c8cd5", 0x10}, {&(0x7f0000001740)="381669c1e5be476357a9e0f6614fb196a2f845216ba2ed6aff5d8b24df864cf4e80a29efb9cc77678ddc6bff9d919fee0f5c88cb237d4c051b0ae80aa9ba2079e1f9806d3ab8a65c4b", 0x49}, {&(0x7f00000017c0)="619b55b1ef5f0d62cbb9f8bb8a8f3144b280d730f37991b5c92e624cc978075909eadbd9a9a21b4b171805d4966747200ede726ea1cf06df586edfbf5e7c7a516ad1fd878150de403595f7bb5f1af6c82653a7a89962fe529ecc7d34374f732a813b89f60067a664505f76791e56d7acdeee93e5d933b5dacfb5f14f4b63c37b93dd4cd9d972d5a90cdf27b98bdee9d5cd12c3ee07ab4698a9af662030b0dbfa1c597181f25f6ffd56e17e7aa15e2ef8c95bc07b4ebf32ffd5452ee3aeaada9104b57ab62574eac9fc451c59f23dc0b0f339e6fdf4e822a517cd61e15e59b0", 0xdf}, {&(0x7f00000018c0)="5e36b7785c50bc84afca53de333f6508c83c318f1f656a5b2bbe27f4f591b527733a4fb74caec0ac25db56b2598846a7cae973d8f6e73ff3c223800deea29f3c61bce13aa584af8c8c78e4fade04306b26b740c5ac0c21239ee5e8a97de3c380cbcf5011119a3fa4081d592956f529d75b8cb2694d0e25bc2691e6a7632cfc97abc53c9dcbbf4c33dc3a0924a84ed332d556baab37265d2e52734ff94fe3912ce91fc9fc32018c9c9c0324a7af4bea162a786edcf14d29d75c27d2849a5ee7160f7a133be2d64f9ce3ab563fec8dba72174165bf1fd8120f76fdc89c6ddd9f07e8", 0xe1}, {&(0x7f00000019c0)="78041bf2842ee843a641882237f2902fcfd6340dc7974385c0b2165985842074c4beb21541d36c6dc33a11dd6be73e036f848d824299e0b5a3443d1813ea3d3346a1ac4f5953685380cb2a03", 0x4c}, {&(0x7f0000001a40)="b878316d07107d8436a8bad7f73d6de1b8f9618a2c5ec2800b32cd28eb314ac70a295f5026f41a5450f97c95cf5a3513c891cf8a6e28baefd1b4269ee3f9adc8d07e4c53e60153977b08b7907e884aec", 0x50}, {&(0x7f0000001ac0)="c71e77b12118ec16acd3c89f3fce5295edaf7fa5b2107eb139", 0x19}, {&(0x7f0000001b00)="f8d6f64f3f6303e9db96195dc2049b8befd0dc8b706b5bfb809ff9191ce79eabc84d1c27e32092bb42c84cc1b28ebfa8dc118e80a2ccd01bfac9696ec9446917a80c24703888889453a0484ccc33ecc278eb2748ba0c41cf91abbe3a1fd4fc116465d9dcb55bc753762d5b8dc5d9478c30670c6e6d193572844868e093835f", 0x7f}, {&(0x7f0000001b80)}], 0x9}}], 0x5, 0x4)

19:17:29 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x800)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x6def7f441c98454f})
setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000500), 0x4)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x40, @tick, {}, {}, @quote}], 0x1c)
ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')
socketpair(0x1, 0x0, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000480)={0x3, 0x0, 0x9, 0xb8b8}, &(0x7f00000004c0)=0x10)
fchdir(r1)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="f00400000000b832126e15194cf5d912e2249d01df969731978d73e59162"], 0x1e)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x0)
fanotify_init(0x0, 0x0)
mount(&(0x7f0000000100)=ANY=[], 0x0, &(0x7f0000000280)='selinuxfs\x00', 0x0, &(0x7f0000000300)='\'\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x1b, r5, 0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000440))

[  436.796403][   T27] audit: type=1804 audit(1583090250.035:187): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/124/bus" dev="sda1" ino=17051 res=1
[  436.899166][   T27] audit: type=1804 audit(1583090250.085:188): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/124/bus" dev="sda1" ino=17051 res=1
19:17:30 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  437.086558][T11771] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500)
[  437.110169][T11771] FAT-fs (loop0): Filesystem has been set read-only
[  437.124822][T11771] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500)
[  437.171050][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  437.307279][   T27] audit: type=1804 audit(1583090250.545:189): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/125/bus" dev="sda1" ino=17051 res=1
19:17:30 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:30 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = memfd_create(&(0x7f0000000200)='\x00', 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff)
r2 = dup2(0xffffffffffffffff, r1)
r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x100000000000008, 0x8, 0x0, 0x4})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r4, 0x36)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000))
write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(0xffffffffffffffff, 0x3, 0xc000, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x0, 0xfffffffc, 0xffffffdb, {0x16, 0xcf}, 0xa, 0x6})
r6 = getpid()
clock_gettime(0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x88)
connect$inet6(r7, 0x0, 0x0)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="d05dfc1ab2e69639ccf45c3250e9b9f989a78c946976ad7d8d35ac5301291bd2578983488fa008873b6a7b71198502899abebdb52834db226ec0506801e9b05b10007a", 0x43}, {&(0x7f00000004c0)="3868072d3f2d682c053fa5f344b66b7885ab781cdde7787e24a9b8c842c627c8429d451428051d67", 0x28}, {&(0x7f0000000640)="f2f12c05439449100db3ba9672a6c605b76053363a2f95a7e9cd5b422ee4383eaf8d166dc267390f66e32b2571924e441a525e6c25fd9d7d9b9729efdfbde1a772d43ce9f7bcf471e371bafc898cbe99de4de7eb4bc54843e16773d2aed30bae", 0x60}, {&(0x7f0000000700)="183fa8ae00971fc2a77ac0b41c43137559f71755155bc13fa058bcc50a7a1715087fe794fc6d319a8762cae7cd242279584ddc46d5ff15f40c51111a5cfe76d41deb221636854e4632f454ddef60f7b9f1b0fb95e71374d387b10427cd6008b9f964c9a705f9a1214290913a21401c0b2298314ff0dc15f717205be70dbe5611325a61e6588d50e031", 0x89}, {&(0x7f00000007c0)="0b2295227b65fe778298cd747588b2b865a611530d397068aed33fa742a8fbd637f29d2d4f5444115c436b0d5d1c680811a7a44b6f7fd568b6b211126e01e3d9c56a784618110e6551598342621fa7284a01bd7750e74c6939fa9dcffc70e44ee02e6f28b4153fc3db225cb5639097cca9ff11937033337a7a0ce8730d7bb8339cd8665fd7bcd574a7a0bbe8dad0f98685c4529c324d1eee7dc2d8ac24419c8c220694cafc9eb9b38958a08283405c548f59b98bef05cb697c8253171d282369a3e047067426735d80b2f768cc357eef9bad1620edccd26a56", 0xd9}], 0x5}}, {{&(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)="9b1eddc70db9fd709545059fd6001d39fa9dff2c6cb655fd9991b599fd14c227bffa47878f4c880ae82e78bd1d0664894869050f97a19aea708d3314e77fb49b11bb7d20c3269633ceafb74d2bfa03b8957d73e6524a3a024ebec480373fb43010ce02d735ca3d3e", 0x68}, {&(0x7f0000000a40)="43f0fdb9a21a49d9779d203795d8b2feb94368dce4b77dad02d9a13dba6225d1284391e39c0abac284b40713b056bb4af50ea4e82e8a8cc5983a92740bb91bd0af2b43ebfc38c6837879905d137735a24bcffe46a8dbfb95399c481b0b4676b116a42aa86960451cd473f49f749fe28cea9b32ae226f170422e8c618771cce78fd16903f5d8fbd88b699a0e0cdc031555662f5028edd", 0x96}, {&(0x7f0000000b00)="4a5176811690b605722354e15bfc62d4390f0ffbd9c5d600c953ef6fffb1b9e32b7cabaf7430f2a24ccd61ac5935ba3eb78fb5bd75a43d2c5e197cd50036327b88ee27c9e71659ba1a2e87509ba5a940c5f0a3120cd27c5cded3045b69ecc2a4b99d817be29ae7f16f8dead4e08b44f2f51b07caeb0d2854375216b88cb34f286308aaedae0a2ab51bc928d60d8a55127663723f10615f7e71d92ed23430430729001f9059b214b04d0546539bed137608cc6ef4ce10da180e2f10b3a9318f18c22fe4b27c9107411c1a917c13b0874f6fdc136f60854b54bd36f2a0aa9ec49b5e6b051f1c2409592e", 0xe9}, {&(0x7f0000000c00)="f2416251018ea9e5bcaf8d7de3ebbc5e7530f51fee71ea54824b1c1e437cb891867be2801ec941112e2cb1a3d1448dab19d7721f0c452437426003772266", 0x3e}], 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xd8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000e00)="c40d096473c0509cc9a8f42c53c391f34098095cb577a0", 0x17}, {&(0x7f0000000e40)="7f70f9b299a824438d52d623bc1f5e8806bcda80ac849e996c3d93cad137d19d22f5a1d682", 0x25}, {&(0x7f0000000e80)="517e004aa4cef6d10b42bc66c338ef43260513015994b6d8c5adeeb328c1f645c655049b5064d765415145d807766247fa331170fa668ac6333e5277409eebb4417ea8da894e3a67a4b4198e85a135d707e5bce4941f7ad7c8af3bfb8334e8d2b731ed3ceb749983f1d023bce07d8cfae5f90800abdcc99564418cf6bc95d82080c0cfb78b2c77dc23e6d77da60ba5fa1ab70d81b04829a5b558be80e08c9ff0fb1fc9abd623fa8bbab17dc1646341", 0xaf}, {&(0x7f0000000f40)="b6b792a6042dc77ccc95035db84a8aa02078c5f80ba55a009b94d7f2882c51ab9d2878d980f91e383b18f367e1c2fb41438ee0f21bd0b90f787dd3b8fbdcc8f297d821e4895bd7468ac857190475bf9fc39cc9e70322d28f327a10a97d62c8ace86f32a32a7d3567de33591146f14074764cba3ec9be4106fb8d9178747b19d59cccf5bdbba9386d130ecc7ec06e6691e45fb3af19ff22eeff5d", 0x9a}, {0x0}, {&(0x7f0000001100)="e6d294eb7c0e6804b2ca0bf88ae998b9da0c14ed7a616483944e53f5279d7335383251857b703eb030c21f96f0f12c9fb131af64a3f0e5d1695d0d382c7a7132286afd3f43f5e246f91ad0028412389990a138a104553e5cc181d0eb4f5bc3fbcdb7f168d3583f370d12bfcad3a2043e017cb51aa3e3dcc0d037ce7a0076d64847f316050d4819f6ecc578f1c0a5d6a2601ada0568c809fc7c56e03c58", 0x9d}, {&(0x7f00000011c0)="210cea810a2073583a0221c17a19fc2dad0e7bfa525de028880b9fe2a1f09485f38861899408da17d5014ccb4825ff32e2545be226f9c0b3c26776e1de1a8acda5c1c2165d07a5", 0x47}, {&(0x7f0000001240)}], 0x8, &(0x7f0000001300)=[{0xf0, 0x105, 0x6a53, "cefdf3df383c902a1be7be75951ac18e28cb053995ca3538df36b48ef687b55382f4d56bf67ae6c0d6e514eaa3d652e732a722293b58400b1077fa5ff2d759607aa8ffe2d0d535fdeac0ec27b8b9886129d5e6670bb6cd81265bb802b7ed1b7bd709a341f710a2a010fcef783b3285de76317b7c87d93c20ca34156f22d767cfcb6d5e4839878f9ec49d0b44934f18e6dc367bfa47c48d9524da04d9fa3bed28109baa8962de758674821230a2df13018928b32cf054cc3fbdb918cee81fabd1ae529f83467042df6a6453569dae272105bf1fdc675e7ebe718c0f90d3"}, {0x90, 0x834126c0ad990164, 0x0, "121d374c7e903d850422c22e684eac7e2f13aeb8a2784bc0dd548b0f434ed9ba32be299ac1a49471d78c6cf7d8e9f06b4aa2aaad2518013d32e9fefebba83aebeb100b811e48b05ba99817a4baa8eeb2d0766a3d64411027dc05643896fa0fb33affec47dadc0c83771e282a2587342160eb0a0edc9a139797cdd564"}], 0x180}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001480)="9d801fc8ee75aa551edbcd8a6e21a0a52fc5226c13c276a1a93fa5dc6cae00c41009d320abbb09bb587bee206106114b4080ba3575b3075a845768c7de43db76f108ccf4786b5a9aadef86eb585a7795f5190fd242aa19b5ccbe006390bb2f03fab039775c9c009c507f37db75c277a998a82b25327716697f40398a893d3de1c290f2c8a0dd50b5a0dd4e72427a6f9b7ec0e0866a545b056e8e778d4ede60836e90df9b38ff8245cb6ded5ed8a65ff4813ff8c94a5e25d879d5fa3b6f8cbf22dc0215879c3bd3e387bd685eea041b54d0ea4e83a344d47066060e52a2702938421d601c686b927192", 0xe9}, {&(0x7f0000001580)}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x238}}], 0x4, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={<r9=>0x0}, &(0x7f00000005c0)=0xc)
r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_type(r10, &(0x7f00000002c0)='threaded\x00', 0x10211)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
r11 = dup(0xffffffffffffffff)
getsockopt$netlink(r11, 0x10e, 0x0, 0x0, &(0x7f0000000000))
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)={0x0, @aes128})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = fcntl$dupfd(r12, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
kcmp(r6, r9, 0x0, r13, 0xffffffffffffffff)
timer_settime(0x0, 0x0, 0x0, 0x0)
write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269)
ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f)

19:17:30 executing program 0:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x10, 0x0, 0x4, 0x0, 0x20041c1, 0x48420, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3122, 0xfff, 0x1048, 0x3, 0xfffffffffffffffe, 0x0, 0xffff}, 0x0, 0x7, 0xffffffffffffffff, 0x1)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{0x50f, 0x9b4}, {0x6, 0xc18}, {0x0, 0x8000}, {0x61, 0x62}, {0x0, 0x6f}, {0x3, 0xffff}]})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x402040, 0x0)
ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000100))
sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20)
write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xffffffa8)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r8, 0x0, r8)
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8)
mmap(&(0x7f0000004000/0x6000)=nil, 0x6000, 0x0, 0x12, r5, 0x0)

19:17:31 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r5 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:31 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:31 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
io_setup(0x3, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80000, 0x0)
io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x7ff, 0xffffffffffffffff, &(0x7f00000003c0)="ef2e911df77f073d4c0a41a758ba9849663ceabc0d234b9b9c69a1098c8820169f05a4a967f0369af089e178aaa333ad259e02574b976c070c485e1c84d9f481d104b87822ce6eea1a4dc79735f44658452cd5471d9f0e1ea6bddf8b0fafc159d4bc89a477cefb25751e9babbd1118d9585bc0a78fc3085a668149b2b803e08550aab3e485866e0ad6e0df6c39d83b58ef57dabd74b8dd1c8059bff5ba709d3971ede1a227ad9ed26f", 0xa9, 0x2, 0x0, 0x0, r3}])
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r4, r5, 0x0, 0x102000003)
setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000100)=0x72, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @null, 0x0, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@null)
lseek(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2f810200, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x38}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004f40)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast1}}}, &(0x7f0000005040)=0xe8)
sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_getneigh={0x20, 0x1e, 0x0, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r10, 0x44a0c, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x6020)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @dev, 0x5}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')

19:17:31 executing program 1:
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
mlock2(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff0d5}], 0x8}, 0x3f00)
statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
io_setup(0x0, 0x0)

19:17:31 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:31 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = fanotify_init(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="6125ae9036061dbe2be76fd703cf4aadfff6a14dd7af84b8d4c9e5168c485b3bfb04616e0db986b228c3de50a716fef2474ef1083787a75cdee471a1e9bc401d193d955435de48b3579ec029db251f4f0354e66cbbfc7973ea949d7388179b67"])
r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000640)='.request_key_auth\x00', 0x0, &(0x7f0000000200)="0281a3", 0x3, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
listen(r3, 0x10000)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x800)
quotactl(0x666, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r4, &(0x7f0000000400)="77386cd3923c599000fd86c77ea200045ceda0e6fb3f456ace5f3a9d5a7bf2a19cf40e1e25cb862bc62fe14840bf3c93b3ff9c6f7734223e271711eb1f128782f7caaedc25b3bd002f9797dccf25b60c2c0af3891df7e8117b0d96ab1f3bda3014c4ec18e97a2867c3b9aa8b85412962f3c99deb75b08c388ba4c01e28c62a8870c14b411cc7646cf2fd327f13eaed7840e7769ff66b28816321cd0a0cb8895fe1a66431a1d75c5d80bbe09ea4771515121c4a29")
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r2, 0x6a, 0xb5}, &(0x7f0000000580)=ANY=[@ANYBLOB="656e633d6b61657020686173683d706f6c7931333035000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068e8954a1b75b77e13a6e6892375d83ebb140530c94e05abdcefcaa099cb197349ec6b6bc1de730e484ce3be92be499664f386dbaf30e75d67008a37de9c40122b6064038e04d8bfa93af1c7287b2d17aeb30eab0564242c7a1ad79225dd"], &(0x7f0000000240)="0217dc4e47b6d1d74286da21c262636dea2d7692ab14b0f743f79676fe734a41ef63913fa2ea00e73dfcd3126c435e309ae8a90b17d5de3a433bd95ca46a86c61e29a2c6840b6dbd855d39e12ff0a21d55bd7e6133bdc27e5bc982258da265174c4e7926ceec6997d586", &(0x7f00000002c0)="8688e48bf0283599257d00dc46090ce0ee0b09ab2deb06741f0720db4d6f1943331005024f2e6170bdc20a88dc4003330e46fcc230a92801ce6062da7699c56496912df0f0633ccb4bf47f2130feb1e0693c1a0f63e9e8ce5583f80cff3769410b1b467f6a635b299e1f7a0ac493f34714ea957760574ac4798303b0a6781858b5be434b430b43ee2b903d594719147cd0983cdb27149db5133efeee35d609c3d5925b2550864d7881341ebd007bf6b5e65acafef7")

[  438.788381][T11826] 9pnet: Insufficient options for proto=fd
19:17:32 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000cc0)=""/4096})
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0})
r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82)
r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000500)=ANY=[@ANYBLOB="1d00dd00e93b1a7f79947e8edc0a4b5d5e7d91009b4ae28a0200ed91288fc23735d3ed33000063ea972f091ca729dc094d433f8cd1e748070d207d7183ffcef0f532a81a9f03d807ef313edf45a024b33dcc5ea96db30aad178b24976695e74b61482374e76f0c6bf5d00895d53f4bb54fe9d097614cf46a33f8ec7aa1c36e03b11b60de0ff806f0ecaa66d3699a2c7c6287e4aa4a766d57a2fd8d98a3e3807bda09fb37a2b2de5952b33b597c6a8c3ed087fda5d4776d45833fc9c16d65aa9ee1c3ff8ad41eee3128c6d3cef720bce88975e2b536adf3ddabdc8e4a1605496f7e092aecf8e88e49b2f68a75a15476b0a6c70e1c3078040cff6e4561194132edc55ca4be9eec532d5e533825fb6ecc7ca6b8ccb1124f72309c9152401272941ce36e46b0385cff3d8f1b966808cc0efecb5d8d17053c145fc3da46fe3c87f28963f19ca8029bd22a14659eb92cd55dde46b6e313129ac5396468d738db00998d7fbf1ec96cdfe057b06fdaae1eb14524fc7ed9705c0f71e0c5dce4feef2bf392d5b9638288f92a463996ca1636317abf1690086442342aa5389136c54409a82a863b628ee7d97f3a9d8d47c998dd6036ce7d2b7ac54aa46754a59c971edca0f05bd6772e6961731dfad6abbe091157"])
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805)
truncate(&(0x7f0000000200)='./file0\x00', 0x3f)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x800, 0x0, 0x7})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r4, r3, 0x0, 0x20002000005)
ioctl$LOOP_CLR_FD(r3, 0x4c01)

[  438.861616][T11826] 9pnet: Insufficient options for proto=fd
19:17:32 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00')
dup(r0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002011})
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002011})
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xe0002011})
times(&(0x7f0000000280))
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = epoll_create(0x6)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0)
r4 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002011})
epoll_wait(r4, 0x0, 0x0, 0x205)
r5 = dup2(r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000006000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000340)={{0x5, 0x81}, 0x1, 0x5c3, 0x6, {0x1, 0x50}, 0x1f, 0xb49})
r8 = socket(0x4000000000010, 0x1000000000080002, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x30a, 0x0)
ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000001c0))
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}})
open(&(0x7f0000000240)='./file0\x00', 0x20201, 0x6)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

19:17:32 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  439.225841][T11840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  439.257492][T11840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  439.276939][T11840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
19:17:32 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:32 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x100000000000, 0x4)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10)
unshare(0x40401fc)
fcntl$getown(r2, 0x9)
read(r0, &(0x7f0000000200)=""/168, 0xa8)
r3 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0)
mq_notify(r3, &(0x7f00000001c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc)
syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mq_notify(r3, &(0x7f0000002940)={0x0, 0x3f, 0x1, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000700)={0x5, 0x4d77, 0x5, 'queue1\x00'})
setsockopt$inet_udp_encap(r3, 0x11, 0x64, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0)="5e8a4b8ec7834e71702e", 0xa)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  439.602330][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  439.602350][   T27] audit: type=1804 audit(1583090252.835:203): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/131/bus" dev="sda1" ino=17051 res=1
19:17:33 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$caif_seqpacket(0x25, 0x5, 0x0)
socket(0xa, 0x80001, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x408)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0xff)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032b02000000000000000000002c000280080006004009000006000f000100000006000f0004000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800c050)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socket(0x28, 0xb96852c5b8ebfbbd, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000400))
accept$netrom(r8, &(0x7f0000000280)={{0x3, @bcast}, [@null, @remote, @rose, @remote, @bcast, @null, @bcast]}, &(0x7f00000003c0)=0x48)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0)

[  439.780441][T11838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
19:17:33 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  439.873735][T11838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  439.924786][T11838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  440.047415][   T27] audit: type=1804 audit(1583090253.275:204): pid=11856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/132/bus" dev="sda1" ino=17076 res=1
[  440.075017][T11842] net_ratelimit: 246 callbacks suppressed
[  440.075028][T11842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
19:17:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = dup(r5)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000227bd0001000200000008000200020000000800010002000000080001000200"/46], 0x3}, 0x1, 0x0, 0x0, 0x850}, 0x800)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}}, 0x4000000)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x16}, 0xffffff01}, {0xa, 0x4e21, 0x80000000, @loopback, 0x200}, 0x6, [0x9, 0x7, 0x6, 0x1000, 0x4, 0xfffffffd, 0x1, 0x9]}, 0x5c)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x600100, 0x0)
r9 = fcntl$dupfd(r0, 0x0, r8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010001f0700015ec70000000000000000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4f118eb25d9", @ANYRES32=0x0, @ANYBLOB="6b4062de67995ec6e70a032626088ddf0795ef52126fdf16e3b988755c811321eca6283bfc51b299b9626f75d983809d9cd9463b1dcd458992ac3b903af529382df87cd217b3b7aa135af634457e23662666ad14840a92cc06ce385f72a7dda2c0180199a36901f93595b4ceae4f6d5f9d9127b52939497707c844"], 0x70}}, 0x0)
r10 = socket(0xf, 0x3, 0x0)
sendmmsg$alg(r10, &(0x7f0000000140), 0x492492492492778, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)

[  440.129739][T11840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  440.152616][   T27] audit: type=1804 audit(1583090253.355:205): pid=11856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/132/bus" dev="sda1" ino=17076 res=1
19:17:33 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00')
dup(r0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002011})
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002011})
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xe0002011})
times(&(0x7f0000000280))
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = epoll_create(0x6)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000))
epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0)
r4 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002011})
epoll_wait(r4, 0x0, 0x0, 0x205)
r5 = dup2(r4, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000006000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000340)={{0x5, 0x81}, 0x1, 0x5c3, 0x6, {0x1, 0x50}, 0x1f, 0xb49})
r8 = socket(0x4000000000010, 0x1000000000080002, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x30a, 0x0)
ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000001c0))
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}})
open(&(0x7f0000000240)='./file0\x00', 0x20201, 0x6)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

19:17:33 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x6558, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e03189000001040000000800000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000080ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000006000000ffee0000000100000000000000001000006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000700000024709a02ff7f000010000500010000000000000007000000100003001f0003000700000001010000180001000501040009000000040000000104000000000000f2275eef7138e6d8404ee35c1c03d0a7e3015b89e6e440ebafa27d5b8188804cd5beea2fda73c030f26439c9e4f2e27a824bfb4415f2af99b482560d1a447df28d8d838ad1a39caf40dc96c5f134529d47c0604f66f8714f8ee51165c4b029a7dc7e2f90de64a234d9098b06231c71bc79c43de912eb17614cf75d8c49152a801ac9a1326f0e334e0534faa8d8704d03c25495230a2ed4feb5298d99c124310dd8d4054c8be6bdb8bcede3d1552b08c169755c508c65ff8e1c50711a38d9a451eb650df96535fcc7669eb1f0f7fc5135a05b389610d33df49e9d1d3808c8fa0524b1caa582c913fedb22de15fbc7e7890faa48e6205a74bf817d48ea3dc9cddb6acc14b94522ccce95a27379b1ced543ad45de5016647e86154fd92670b9fc95ff90ea60fcf349981185b11322c4a48276eea082e4be45b9125653ba5f8ad8500d0d768b2de6b9e198568ecd526a1ba44c9180104fa91e55e31181b4acad815ef766bc8604c30c715da309a185645439aaabb542625905dc77193d45cde1978dc9c67cea6b01d2d4a28b13fc1e71d1f2a38537c44b629790b1305371c9e705771da5555c743b5b4adea2b95aa708f41e7a713277f5422f2bb669861730554e266f4ae61e0377f517b23ae4821e04e500cf998be043bab81fa38368a555f4a381eab2a692e06a4ca80bcb7570518078eb76bd313b23d0708cd26017f5a6"], 0x8d0}}, 0x0)
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r4, 0x1, {0x68218226ac896240, 0xff, 0x4}, 0xff}, 0x18)
r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setresuid(0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r7, 0x0, r7)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, &(0x7f00000001c0)={@remote, 0x6, r4})
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
ioctl$TIOCEXCL(r5, 0x540c)
r10 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r10, &(0x7f0000000040), 0x2e)
sendmmsg(r10, &(0x7f0000005fc0), 0x800000000000059, 0x0)

19:17:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x100000000000, 0x4)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10)
unshare(0x40401fc)
fcntl$getown(r2, 0x9)
read(r0, &(0x7f0000000200)=""/168, 0xa8)
r3 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0)
mq_notify(r3, &(0x7f00000001c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="5999a6b614571632d50700000000000000e821050012bab98ae6f5c99004e2c31e8600e93e3315dab2126c89ea765ee78b9e9f9bdd2c4c9a5e87c578e59ca81b635a148044ee4268064a8ca7a4ba6efae6ac4777e273b8bcacd88f2f13a8ee8c050000008312370000000000000000010000355b7a20e0aa4c3acdd0ea7a797134d56fb82685b1c9a1ea45c0f5636080dfddd27b0ff704f24ffdb8abfd1170daaa20d693b8cf903f9a03552249000000001a00000000000000005ae75f9d310316f3483481aae318095b1375255f500d45ab764d3c64161f92a152080800d4e6cc3228edb445ea7d1b7b42754f41e9ebc9de2a75a25a74bfc8a816cab648817eacf225a46637fd67c5b26eafb0fceb58b440703a26f7aa8b79a913c4576e452250b9a336b2bfa948b00201b604958bceec36d5c15285d12c57d6e9fb10bb5a856b97dac83bb69ad50673e2deb83ad48ef7db330304c7dfa2cb3f90b322ad08c061f2d27ca261814f9fddf4d3a32ace9c6acf00866d00000000000000001dc2c6963b767effced9d98a05c260aec29dcb4837e427e86751ec583038bc682c4d9635e996aacc89d87a0700000098f35af802fd65ea69ae8d4d1734532428b8924fe8e2e0348d112b41d3ab8993a5976cdf177ccbc3af81a2d95d228cf2d8c69a94b190735ced0ccf7d00e08af0cf7fdb77c8536e8d6c74cbc70197373f56ba211cfee3d204744d5b5225d9fab1cd6ab4d176d9abdcbdee02c2db5ce0e3e60d99f814c11fef2b22e68cfd3c2249b46d4d75edcc1ae085c0ff9b763b0ccd52f914f37ccff8046ec53b1304849dfe17deda220cb8d66a2978e2bf86068f8040ae4b6b640367570c99dcda7ce3176ebef3f7309acf5c706c2918c6252f7eeec4fb79c94f2bf4cd3167b20c8c4113c050b110e0117c645446abe94c74f7033afb83f4a9d9319dd330f2567dd355e860205f267e00a3aa9d87f3fa8701393176f30f0ae2a429ad9538354388b2f58060"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc)
syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mq_notify(r3, &(0x7f0000002940)={0x0, 0x3f, 0x1, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000700)={0x5, 0x4d77, 0x5, 'queue1\x00'})
setsockopt$inet_udp_encap(r3, 0x11, 0x64, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0)="5e8a4b8ec7834e71702e", 0xa)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  440.503938][T11872] CBQ: class ffff0000 has bad quantum==14, repaired.
[  440.582520][   T27] audit: type=1804 audit(1583090253.825:206): pid=11874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/133/bus" dev="sda1" ino=17070 res=1
19:17:34 executing program 1:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r6, 0x0, r6)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={<r7=>r6})
sendto$l2tp6(r7, &(0x7f0000000380)="ec5088fbeba6383194f34dbe89c3f721f43d5b260072d8a70f0713ca9a629b802a4913213ee4c3268c920839ad3d36ffde87628268177c25e15c27b5e782e41e4bb1e759a34223", 0x47, 0x20000044, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000002c0)=[{&(0x7f0000000280)="fe", 0xfdc3}], 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

[  440.719885][   T27] audit: type=1804 audit(1583090253.905:207): pid=11873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/133/bus" dev="sda1" ino=17070 res=1
[  440.726643][T11867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
19:17:34 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  440.916226][T11867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  440.932610][T11867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  441.028527][   T27] audit: type=1804 audit(1583090254.265:208): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/134/bus" dev="sda1" ino=17078 res=1
19:17:34 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  441.185739][T11867] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  441.220543][T11875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  441.274095][   T27] audit: type=1804 audit(1583090254.515:209): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/135/bus" dev="sda1" ino=17078 res=1
19:17:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000000000000feff00000000950000000000000000000000000000e856898ba7b9210469"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x10000)

19:17:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)={0x68, r3, 0x400, 0x70bd2c, 0x0, {{}, {0x0, 0x6}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000)
r6 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @rose={'rose', 0x0}, 0x5, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000340)="508b0034ecbaaa6f7a55e5cc81039052a5759e9ff9bff74808fc4addabfa8945af314f6b306b56122a9e6efe97f63345e8fd641e200be55d83d223f8226df9127d7e6aec593b785f15c030a1a9cf19b2ad3c106f429d9cbc4c577e9037d8aae7e6f5c2c83d8713458420b57a23d1274f4822e4c6823df5c790669e557aa9585dc3d44fb16632fe9a25493f46cc171ba5efe09ec9feda16d1a6c27611287d", 0x9e, <r8=>0x1})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000200)={r8, 0x81, &(0x7f0000000400)=""/129})
clone3(&(0x7f00000004c0)={0x50008100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50)

19:17:34 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:34 executing program 2:
recvmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x7e11b10a55d1eb19)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r1 = socket$kcm(0xa, 0x0, 0x11)
sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000300)=@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="e98f77bc55dd774848844b225ef563b2cce74835d3b4aac0fd8702503f368a2f3ea14d84c22edf8febee6434230afa8989a3831fd636f508014da206364f251d4f652a7bfc4a7865fe8beaad7487d797a7cdd6221d0240c01b0e8fab5f2c7b493c2d53d0a6cf176dd69c997fc4ecfee9ad853ab2ca604957e777241c2384a767347e17357e06057e69e8308868fdf36c8e5380ada06e816390a9996ff63b5acd650e051af7c7f942a9d85e2c", 0xac}, {&(0x7f00000004c0)="6f3ee637f09992ffa205b978490dcb102ebed0be232c7c57d6487a9673e040ddc593b45be24671079b7cbc7cfefaccbbd48734739122ec116114c8161b9ea1f19b34fe2fc2cd4316ed95a1f876091ff0d83d48c9abc0520fc8e6bf8db19fd7b8d0fdf38e153ddda160fc9f023a1f663f7fffc6231bc02a4a0b8966b81331735d89d91271aee23f55f776ceb57eea8939410f8ec1129d28329a5852e0870414b76071da0d8f8070ab9afc013c98c1662b1837e5169044480ed2e0ea63fdd1ddaa7170ba39b13ff7d71207e9f7d9d86a57d980c6a1b3469d2fc89cfc49ae1ae7447e7e738c3e5ea32d9efa2e902dbb8317ce2b9fa54cf5cc94433bcedb9c", 0xfd}], 0x2, &(0x7f00000002c0)}, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f00000002c0)='./file0\x00'}, 0x10)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xba}, r2, 0x0, 0xffffffffffffffff, 0x0)
r3 = gettid()
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000940)={0x0, 0x70, 0x2, 0xff, 0x0, 0x20, 0x0, 0xb7e2, 0x21800, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffe0, 0xa, @perf_bp={&(0x7f0000000700), 0xb55c8e88a6fb10db}, 0x2880, 0x0, 0x0, 0x7, 0x2, 0x54, 0x7a}, 0x0, 0x0, r4, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000002a80)=ANY=[@ANYBLOB="180000000000000000000000000000009500fa0000000000b3d6fbdaef9f7d4e1a5b276570dd9934843e3cfc6b3282d976ef3190ed183edd9f8f456a870ca7555cbc7fd526dbd9e8f3860bf492a8e4afc28ac1f48f4c4bbb4322ddf3248d1d9f18cd5d7725617690728e1ac1b67474e56a20ddb70311ad550db6bd9f561574901163080600836830e6d293f4d9d1fa470fd23e9c9282eadac0b0dcc2f39ca2f02c19ee61748e1db2740a6b7109dbcb87212b861303286dd6b455d54509792ce29d6f7189ebd9ab73c3c4a780ea140f2e8780d8281d2d6010ac5c2bc3af73954abd5a28da5fb2c39dc07129bf3bca7b35d937221a739396bbf8e0f6c37c463a6ec8bad33a89c8c020148e0e9522fe0e4dcdb8a4c2a5dffe42896d2bed45040a513dbf05f30165ec0e879bfd4c3c92c37d697541a80e37c13ee9d77b15e19515c5685d2c77ce89ee99c8ea74f28d8a085db78dab969934ee9b8909ae91b287a39149ef8217baebce4e5108c232858edcabec8e7ab062b1fa81a47463a38fa0f147fda1a8b38ef57b03b85b2582730dfff52d5039d41ef8e253723055c34299f89fa387ba400ec9432fa638292892379a991d102b6351f8af25183d753e22d94369dec1416b3661632681b0f66b11a3fc18f7967aba0ff9fa901c12ec55d3f5b3c620e5b04c66212a62f64bb49d0b6c52fe49308e5ecdb03d5cad40b9999d4eae7176cea5c643815bdf6cfef3562cced066cad487543e6fad13c7e78915e204db795164bc0f1955de204510b49b139503082dafb7a032cde4f95d354d2cfc08f6585f81bbd23bf89479e999a2c3683058bcc34199a8d7dab9be31db3895249ad9e1f5c14aeab82df3a736673724261e6fae02242ad78e55853ad57f111a5eb2fbcbec0000000000001ca0edc5b5a8889ca51bd3eabdd79c"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r7, r6, 0xd, 0x2}, 0x10)
r8 = openat$cgroup_ro(r7, &(0x7f0000000500)='cpuset.effective_mems\x00', 0x0, 0x0)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x3, 0xdea2987c6ce449d8}, 0xc)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18160000", @ANYRES32=r9, @ANYBLOB="0000000000000000181400008b1aa1ade738375dbbad29ec1ce0d53b2aced5885994925c0d21efc868b4a06bfd1d3417dcca94a8bcf5e0117dda371fd547cf597337b42eea932d67a95120bfa58c103a399679fc5f7e2ef4a08c6bcb19903b79d5398f1fd8b410c0ecd1cedde009b334941f633561b183987b9d96fd3297ff4b13b53e04e108cebd0731cd0fafcef3d098fb7c7e1f1f14a5e8b7a31d", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x587, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x26c, 0x0, &(0x7f0000000080)="020043d05d25b666cd783f4b231c", 0x0, 0x8e}, 0x28)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r3, r4, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30)
r11 = fcntl$dupfd(r5, 0x406, r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r2, <r12=>r11, 0x0, 0x13, &(0x7f0000000600)='cgroup.controllers\x00'}, 0x30)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000680)='^\x00')
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
ioctl$TUNSETIFINDEX(r13, 0x400454da, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r13, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000340000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)

19:17:34 executing program 0:
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="01434430303101004c494e5558203f202020202020202020202020202020204344524f4d20202020202020202020202020202020202001012020202020202000000000000064a955cb828e4cc95903334c7a0000000000000000000000000000000000000000000001000001010000010008c4534127d0f5d0b6594c45648dea7a08", 0x82, 0x8000}], 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x30)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x18)

19:17:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x100000000000, 0x4)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10)
unshare(0x40401fc)
fcntl$getown(r2, 0x9)
read(r0, &(0x7f0000000200)=""/168, 0xa8)
r3 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0)
mq_notify(r3, &(0x7f00000001c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc)
syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mq_notify(r3, &(0x7f0000002940)={0x0, 0x3f, 0x1, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000700)={0x5, 0x4d77, 0x5, 'queue1\x00'})
setsockopt$inet_udp_encap(r3, 0x11, 0x64, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0)="5e8a4b8ec7834e71702e", 0xa)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  441.728870][T11903] ISOFS: Bad logical zone size 2170
[  441.850317][T11903] ISOFS: Bad logical zone size 2170
[  441.890354][   T27] audit: type=1804 audit(1583090255.125:210): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/136/bus" dev="sda1" ino=17083 res=1
19:17:35 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x9, &(0x7f0000000300)=<r1=>0x0)
io_destroy(r1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r0, r2, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r5, 0x0, r5)
io_setup(0x1, &(0x7f0000000340)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x64, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x11)
clock_gettime(0x0, &(0x7f0000000400)={<r10=>0x0, <r11=>0x0})
io_pgetevents(r6, 0x2, 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000440)={r10, r11+30000000}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r12 = dup2(r0, r4)
r13 = getpgid(0xffffffffffffffff)
ptrace$peekuser(0x3, r13, 0x4ff)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r14 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000180007041dfffd946f610500020003001f00000504000800080016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

19:17:35 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:35 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x1)
r1 = open(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x428000, 0x90)
fcntl$setlease(r2, 0x400, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0)
fcntl$getflags(r2, 0x401)
socketpair$tipc(0x1e, 0xaff1af3c764acc36, 0x0, &(0x7f0000000380))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
accept4$tipc(r6, &(0x7f0000000340), &(0x7f0000000740)=0x2, 0x80800)
geteuid()
fcntl$getownex(r0, 0x10, &(0x7f0000000780))
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000c00))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000000280)=""/121, 0x200002f9)
fsmount(0xffffffffffffffff, 0x1, 0x0)
getresgid(&(0x7f0000001600), &(0x7f0000000200), &(0x7f0000001680))
getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc)
getgid()
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000008cd84045f6b4f25337bf98b8cbdb1edbf4925f45348bc9a7e244ce058edf053ab3c171a07e000000"], &(0x7f00000001c0)={0x1, 0x3, [0xa0, 0x1c6, 0xbff, 0x7f7]})
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r11, 0x4b6c, &(0x7f0000000080)={0x200, 0x0, &(0x7f0000000400)="aab21a2f3cc8e179e78ce38e0e083b82bb4621abd986a72cf964871996e0934372cec9cf97beda533a8040af418a84061de13b9f1d79d0d0b4a04494030e7da5a9498c4c86e9cbf8b5fb3771fad678e2120ae12a66a97fe8ca2b2540c26fd1b19b35af348b25727c22d6fe94dced8e88d5f5bbeb183cebbf8433f2a0cf2eb521c5564333a4d00d5d4c5a1ed38d20c57d95de1213bad485635b849dc1ba2ee59b11186ae6989ed65ded54237de489a77c3cb314d37d796b5ed87c72679b2f162cfd7d78a2b500208358cf2cb8722b75f3969fe0c47a9ff207c9736b1b61c195adabd44b9df69828cf69513cbe1cf608a0b058236d62410033ebd5a439f147e2cbc19b8b9ebd7c401ac826cd24b327d9d70be2c0aa45ef48358c9325a358cb5df0afc4495935fbad660647697f22dc19f8cc403e9ba0c43374bcb1b0de3e2655b708f3900a0c7c456c16a2ffc986b3c2f5f67313b9a52e840e1c437498e3bc109b3ad5dc6515aec4278ace18221f6b73c77aa952e88943d74912cb537d302c30a0c3c413983f4a8b45d5556c75ec77fab6e6606f35cd0a778a4df56c5c29c8e9b077236bb5780de725a506c040292fcbe1e4ca7e819f30ed730f8c7c97cd70af4f74313efd947ca71a2a6fd3f672ed72c52f3987a6432503d0a541e2f47c4310e6d2b747f84cfa547555b1ee82b3d7afa742cb64ad955ac97b62e610dac73858bb1f3be7697fae2a63de111e9bd32a1044649a9a833046e5cab5c61136b91366ec8bebbae453cdd4cf633668bcaa3855769975c0bfd8f61b016a3396debbe2922ed4ddb5c12d50b6e465efa33f08cb8dcdf80cb3870090c863ecb84a7cc4675d6ca711a3508186a86c9bffd182a11f3fcbe25c81b6ebbcdbbd8c12e8af02b2aee6964479e9a7649612c9527a9507b5324e82fe643012101b3fe51ae96f83691da3ff72adf51f98022d8584666733a2abfbbb594dd15ff8f6b250ca4682affbe1661793ff0aa611ac104a0d2159855bf98544301d573a7f3b2c4e1d10a324270f381c726c2b765082502ac3156f1441c1a6c4e5ca01ccd15daff9f273a8b09972c1c0acb1fc4b6cb8b7cf8663f5636eb4946f340e65e2ea0d03df5179b9cae9560ec2dd3d508451ca3e99e27e83612f06fd8c6baf348346d49e43cf51ca7e40e5004ae412b75700c58452a7f2b2d5c3834287f74b18032d83a1b90a299586eb964f6884ab710340ab9089baddfea39e3e694e68bbe83fcabc3400c0a3294eff10ee902bb5b6b29823e105f5910a8b1cab7b26d5e019aedad853c37a31b8bc5d6d3b41120871ac587c31e2e4e37022455f1317132b5224a4a71e70f91d4a24433de6d198be637f231f808069ed66ee23c35c10697b894d7e5abedc9d8b5285b6fcbc4a57c85ca2c6c51181ba92fc1a1edef5988ba83a35eddad04597203f38fdf138"})

[  442.266802][   T27] audit: type=1804 audit(1583090255.505:211): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/137/bus" dev="sda1" ino=17075 res=1
19:17:37 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000200))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0x3}})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x8843, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000180)={0x0, 0xfff, 0xfff, [], &(0x7f0000000000)=0x7})
msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

19:17:37 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x100000000000, 0x4)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10)
unshare(0x40401fc)
fcntl$getown(r2, 0x9)
read(r0, &(0x7f0000000200)=""/168, 0xa8)
r3 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0)
mq_notify(r3, &(0x7f00000001c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc)
syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mq_notify(r3, &(0x7f0000002940)={0x0, 0x3f, 0x1, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000700)={0x5, 0x4d77, 0x5, 'queue1\x00'})
setsockopt$inet_udp_encap(r3, 0x11, 0x64, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000002c0)="5e8a4b8ec7834e71702e", 0xa)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)

19:17:37 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x3851, 0x9, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
geteuid()
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00')
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080))
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe90, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x3800)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x20)

19:17:37 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@bridge_getlink={0x28, 0x12, 0x5, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x3}]}, 0x28}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x1, @ipv4={[], [], @rand_addr=0x800}, 0x8}}, 0x9, 0x4, 0x800, 0x7, 0x3}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @loopback}}, 0x8a58, 0x20, 0x7, 0x400, 0x2}, &(0x7f0000000300)=0x98)

19:17:37 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:37 executing program 3:
prctl$PR_GET_SECCOMP(0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x400)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)=r3)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x8, 0xe5}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000500)={0x5, <r6=>0x0, 0x1, 0x40})
ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000540)={r6, 0x1})
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac000000001d010400000000030000000c0000060c002c5a00000000000000010c00078008000240000000401c000780080002400000000208ff01400821c072080002408000000144000000000002400000000808000140000000b60800029813b0cfacf75dbb400000b4d3080001400000295f5a000008000140000000d608000240000f4fc9cbb71f1e72c479ae58025a0800008008000240000005d70c00064000000000000000061400078008000140000000000800014000c9c536c3b9340b76cb6fb27b8d222f0c036ba63d55f0550347f52f83a753055e4831078bf10c857961683466bb070000000000000082b5974c6d4f5448138e63fa3e6519dcd51eec882cbf679e7d676f1726a1ccd00c0c0ee403756bfec19e359831d3f4334232e2744910f63d2c6be01e53b088681690b59f2639d6db1f6ada1e2be0f4a3b89d8eb469e906e806e2096ed21808b3c6633e"], 0x1}, 0x1, 0x0, 0x0, 0x45049}, 0x0)
sendto$inet(r2, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xf801}, &(0x7f0000000040)=0x8)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/adsp1\x00', 0x300, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  443.971035][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  444.066060][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  444.152412][   T27] audit: type=1804 audit(1583090257.395:212): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/138/bus" dev="sda1" ino=17104 res=1
19:17:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x101, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
memfd_create(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x304)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x304)
r3 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x5, 0x20000)
r4 = dup2(r2, r3)
r5 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4})
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
fallocate(r6, 0x3, 0x0, 0x80000003)
r7 = creat(&(0x7f0000000300)='./file0\x00', 0xe)
write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xff34)
fallocate(r7, 0x3, 0x0, 0x80000003)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
getpid()
timer_create(0x0, 0x0, &(0x7f0000000480))
clock_gettime(0x0, &(0x7f0000000180))
r8 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000004c0)="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", 0x1000, 0xfffffffffffffffd)
keyctl$describe(0x6, r8, &(0x7f0000000200)=""/95, 0x5f)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'})
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40))
socket$inet6(0xa, 0x0, 0x88)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x10211)

19:17:37 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x141000, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x44122, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xd, r0, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x20})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0)
sendmsg$nl_route(r3, 0x0, 0x4000000)
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225", 0x22)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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")
openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = creat(0x0, 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x8, 0x20})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r7, 0x0, 0x0, 0x2000002)
fallocate(r6, 0x0, 0x0, 0x110001)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r9, 0x0, 0x0, 0x2000002)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9, 0x0, 0x8, 0x20})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r11 = creat(0x0, 0x0)
fallocate(r11, 0x0, 0x0, 0x2000002)
fallocate(r10, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

19:17:37 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:37 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030313030302c00ab209ed1984289f40bcb2f66935207a22b44a54175a78161caf5d6c18d5b2b74619eba4ce094c7415300b73a1c0160dab4da059e3d5e2498a68a72606da36d1244244c6f2ca397e40fb835070fcda388302bff5d918891a7247cfb8685c180e53cdb6f1f8f03f6cf3acaad27dd963204e757a56fc2bdb0874b78727708d9b00950a296ced39eef5c3b7a7b093a45ba1b4513a8889d718546cf93212aebba5931f1bb9344c3ab48f57fddd5a8f24b7b544a3c928f2ec93dc36e0027d900"/229])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0)

19:17:37 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040))

[  444.699525][   T27] audit: type=1804 audit(1583090257.935:213): pid=11975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/139/bus" dev="sda1" ino=17108 res=1
19:17:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000002c0)={0x0, 0x1})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000300)={0x0, {{0xa, 0xffff, 0x0, @dev={0xfe, 0x80, [], 0x38}}}, {{0xa, 0x4e20, 0x0, @rand_addr="0734f427fbf5d540e332f902a75a4e2c"}}}, 0x108)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

19:17:38 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
ftruncate(0xffffffffffffffff, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:38 executing program 0:
io_setup(0x2, &(0x7f00000004c0)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0x9b0000, 0x9, 0x9, <r4=>r3, 0x0, &(0x7f0000000040)={0x990a77, 0x6, [], @string=&(0x7f0000000000)=0x8}})
ioctl$KIOCSOUND(r4, 0x4b2f, 0x8)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000300)='P', 0x1}])

19:17:38 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x5, 0x2, 0x400}, 0x1})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000200)={0x0, &(0x7f00000004c0)="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", 0x1000})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000380))
sendmsg$nl_netfilter(r2, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="14002539d4770000000000000000000000000000d7ecf291aafd8343d1a6636aeb40c11eb0ede07eb1326037fe3b4db6cfb04235f7baf1fc35dfd3d54319bbf36ae85b3d780ec61cacc3a5ba3d4629f482297da4687a43b7f6fbb206d2640393a625757f5b774f3cee581f83e4da0de1dfeb2a959bae0941cdb67087ada90ebc7252c6b5f681d1f6335f2b16f0f85b9c2a960f1b416a5226e4c9aa879d3dd75fc3399edfef5818ca78536550b618d7e7"], 0x1}}, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000340))
unshare(0x60000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00')
r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x17, &(0x7f00000001c0)=0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x1, 0xa, 0x4, 0x4, 0x1000, {0x77359400}, {0x2, 0x1, 0xbc, 0x20, 0x1f, 0x7, "3bbbb347"}, 0x7, 0x4, @offset=0x10001, 0x1, 0x0, <r5=>r4})
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, &(0x7f0000000300)={0x0, &(0x7f00000002c0)})
r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r6)
sched_yield()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in=@broadcast, 0x3894, 0xffff, 0x4e21, 0x0, 0x8, 0x0, 0x80, 0x2f}, {0x2b7b, 0xffffffffffffffff, 0xe9, 0x0, 0x8, 0x800, 0x8000, 0x3}, {0xfffffffffffffffb, 0x6}, 0x0, 0x6e6bba, 0x2, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0x2, @in6=@mcast2, 0x3505, 0x3, 0x2, 0x0, 0x0, 0x7, 0x9}}, 0xe8)
open(0x0, 0x0, 0x0)

[  445.147077][   T27] audit: type=1804 audit(1583090258.385:214): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/140/bus" dev="sda1" ino=17096 res=1
19:17:38 executing program 0:
socket(0x10, 0x80002, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = creat(0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0), 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xa0, r4, 0x8, 0x70bd26, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35cc57ed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f759ce3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4ace23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd2a25ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = dup2(r2, r1)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7, 0x8f, 0x5, 0x4, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5c, 0x0, @perf_config_ext={0x3}, 0x40, 0x7, 0x7, 0x3, 0xde3c, 0x2783, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40082}, 0x48455)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000200)={0x1, 0x2})
pipe(&(0x7f0000000700)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000780)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000f80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='x\a\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x778}, 0x1, 0x0, 0x0, 0x8000}, 0xc040001)
r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r11, 0x4, 0x42000)
syz_open_dev$vivid(0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b718ed8e38cb4139fa0b4b6addead9dbde8371e7f7124bc49c0e6d68ef73580deb33e7fbd8698f813047776a14b4aa2f66399ff393e105f2e7d18cb62495524dcd062ba344383e08e37928647fa92b2e95ddd3f026aca1c218919ee7b17c79aef696951d4e03eb2d698c564e8e3e9d9c68560698d23af172398e11b48088b15f692069bf410f8ad9d547a191135c8bae13a1cea8e980fdfdcfe7903d89831c83469f"])
dup2(r12, 0xffffffffffffffff)

19:17:38 executing program 4:
syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={[{@statfs_percent={'statfs_percent'}}]})
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x80)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa6c1c0, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000068}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x8, 0xb, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004861}, 0x8000040)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40401e5)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)

19:17:38 executing program 3:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000)
recvfrom(r2, &(0x7f0000000480)=""/4096, 0x1000, 0x40000000, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r3, 0x0, 0xa808)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=""/246)
memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

[  445.321322][T12011] gfs2: not a GFS2 filesystem
19:17:38 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
ftruncate(0xffffffffffffffff, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:38 executing program 2:
socket(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x2, 0x1, 0x3}}, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8478071")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000000000004000000a8040000e8020000d000000000000000e802000000000000d8030000d8030000d8030000d8030000d803000004000000", @ANYPTR, @ANYBLOB="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"], 0x3)

[  445.419367][T12011] gfs2: not a GFS2 filesystem
[  445.424729][T12010] IPVS: ftp: loaded support on port[0] = 21
19:17:38 executing program 4:
syz_mount_image$msdos(&(0x7f0000000540)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66010100020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00", 0xfffffffffffffe40}}, 0x10a9)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00'}, 0x18)
fchdir(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffff0)

19:17:39 executing program 3:
prctl$PR_CAPBSET_READ(0x17, 0x10)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
socket$packet(0x11, 0x0, 0x300)
fremovexattr(0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57)
write(r1, &(0x7f0000000380)="240000001a00110214f9f407000904001100000000020000000200000800040003000000", 0x24)

[  445.714372][   T27] audit: type=1804 audit(1583090258.955:215): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/141/bus" dev="sda1" ino=17095 res=1
19:17:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xfffffffffffffe01, 0x7})
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendfile(r1, r1, 0x0, 0x10001)

[  445.855602][T12019] IPVS: ftp: loaded support on port[0] = 21
19:17:39 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x100}}, 0x20000040)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)
setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x2)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="22a7510df2fd83ad1383e6b6d8ae5c7552", 0x11, 0x4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)

[  445.915888][T12043] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 16)
19:17:39 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
ftruncate(0xffffffffffffffff, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:17:39 executing program 3:
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000700000000000019078fffffffcac1414aa0304907800000000450000000000000000110000ac141400ffffffff071300ac1e000100a762d3f0b99729aab056aa23d61c85ba000000000000007f000001442c0001e00000f8462a22ab21010000000000000000000000000000000000000000ff"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
fcntl$addseals(r0, 0x409, 0x1)

[  446.000579][T12043] FAT-fs (loop4): Filesystem has been set read-only
[  446.024523][T12043] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020)
[  446.071055][T10269] tipc: TX() has been purged, node left!
19:17:39 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x5ba09f51)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x1, 0x7ff, 0xd726, 0x40, 0x1f})
ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000001c0)={0x0, 0x8001, 0x4, [], &(0x7f0000000100)=0x2})
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000240))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000340)={0x4, &(0x7f0000000280)="cb4b8c2a79c95af3e5d09d6c97f679506f2cf6c98d4e65b730c9d4bbd99f6fc407cf325b2b009faba07a643f2c04e07e"})
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000002c0)=0x800, 0x4)
read$FUSE(r2, &(0x7f0000000380), 0x1000)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x80000000, 0x111002)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010f0000000000002200080000000c80010008000100a66dee83edd5ea"], 0x20}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, 0x0, 0x40)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000080)={0x1, 'veth1_to_team\x00', {}, 0x8})

[  446.313045][   T27] audit: type=1804 audit(1583090259.555:216): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/142/bus" dev="sda1" ino=17096 res=1
[  446.418590][   T27] audit: type=1804 audit(1583090259.595:217): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/142/bus" dev="sda1" ino=17096 res=1
[  447.451817][    T0] NOHZ: local_softirq_pending 08
[  447.461067][T10269] tipc: TX() has been purged, node left!
[  448.091511][    T0] NOHZ: local_softirq_pending 08
[  467.931848][    T0] NOHZ: local_softirq_pending 08
[  468.571487][    T0] NOHZ: local_softirq_pending 08
[  469.851785][    T0] NOHZ: local_softirq_pending 08
19:18:09 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0xb, 0x6, 0x1}, 0x14}, 0x1, 0x200000000000000}, 0x0)

19:18:09 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x88181, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000001c0), 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

19:18:09 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:09 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x844, 0x2008, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000d, 0x10, r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
dup2(0xffffffffffffffff, r4)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="8f5e92cfa9ccef3ba7a09c799b0851a2c7c740f0f6401c1fc0c5d061c2514c586821e39dedf67c0469d64b2dcd2dd34d51402dc00f068d0eb73865f07a397f6f7d59345451ae2e4b33e32f39f2e13069179a94c79af11daea5327024830a4997f27ca0d81e7e443c6ff0a10fbc0d9591b5c0d2c4376be12f9bc9e1c73f759adcb259d63699736986fff5f09411d1839bceee2e304df9074290cfab5580d089b6b01678746a5c6b10fcca9de76a2503be105f9521ad0fbd48603b8ac63075372956725382b05d863aa88c8615a67fa5ac3136fa69e7748c8cd3c7d9157278bc6c", @ANYRESHEX, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC], @ANYRES16, @ANYRESHEX=r7], 0x5)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$DRM_IOCTL_GET_MAP(r8, 0xc0286404, &(0x7f0000000300)={&(0x7f0000001000/0x4000)=nil, 0x7, 0x4, 0x0, &(0x7f0000004000/0x3000)=nil, 0x50a1})
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @null})
rmdir(&(0x7f0000000340)='./file0//ile0\x00')

19:18:09 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
open$dir(&(0x7f0000000980)='./file0\x00', 0x400, 0x32)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xa50004, 0x3, 0x6, <r4=>r3, 0x0, &(0x7f0000000080)={0x9909c8, 0x2, [], @string=&(0x7f0000000040)=0xa2}})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x140d, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x4)
writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000380)="544ab846e8242b49976a7a9e6ce5c03027022a7fe64166076cecb01d993b8f7a4b4540b4224a1689e700d3254fb0e20ad2f05a233d91852cd1e04c790666ea2585effb3d9f9942f4e9bc9c80776cb7b7684226e8e8e978ed2ceb987f40109a4568f220f37195e1be853326c81c124e8033990bbe2c5fcbeeb160211fcdf1022355bd602ede62713912297b1bac249745b177177c54c5cc83e7123dab44f4aed659b0cb5d790cdbe2be5153e1fef2741749d0402a1fd4cab7e86511b0b5ec0ec3bdd4b2c1984bfaa57d2093acac624d9cabb7fc23888e215e0dd1c39a0de9a18919caf60d211b6364ebc62564512c30494f1699999ec58011a26fb1", 0xfb}, {&(0x7f0000000480)="15121be88e3872a42082c89f29de44b0fe419f39949e50a6e21ee2680f52d3a75b694aac723aaab130c5fe72d60ff6cb83c0a4ae4e7b95dc488e05c53374c527", 0x40}, {&(0x7f00000004c0)="e06f2b2ff6101eebd8b852bbf4dbf0b778b62e3008153005c0de5eaa613cf02882fba43f96f8b70aba65cf3cc0dec2b94185657c03fb853dd78fd4ec654ac6d7c4d75881db6bf319255149a803b8fc6907b57789651d3bac2f9fff46200bbeb70e9059d58094c189023854", 0x6b}, {&(0x7f0000000540)="4a4532520cd7d88c2d9238da0f15636d6c2a649d9189f55846aa8e86c7cf18d15d15f021ee8437f61238f83b7a7f3b2916734d30a1a44b4c238d3519bea2bcb78f1becf1c0be1487ad6a9b5311f60b02a43596536809bcc3494ac1021f558bfa8712ac9197f26d40d3144eddf8a75b39dd3f31a5b1db11af534099a22a0268e4a418b86fc6ea0d5178da49649a9e84f45c56dfdd20", 0x95}, {&(0x7f0000000880)="3db21588de2c670339a0d06cd2732c11bc46d5e35b3a8cf0303a70be9e535b52ac9a7f5f4b436b9264f35301e1e6a59d65a3bbd8ff0acb3b2908faf6a7b0928ce38510fdde85cf701cb631e715e906083cd4659e58b093293eec65455410cc5a06f749b0176bfed77401ddf679434d6ec0ad21817965bf72fd3c6625c3a2b9971260b901f72163e3a0053622c9f154e409a7ccad54b9d13b261a751f0050f571093bb413e79e1680db8d8aca856671ce3335cae15eb350931040e74a6bcc99f746febe7d5204", 0xc6}, {&(0x7f0000000600)="7575c0733dd473abae5b72b80b634fb75bc46e2ae2ec13bef4a7fb8a5bf4f8e5943c542d3ffd6fbd240333b013a3f1fe6f0fc591e24d713c3e00aeb5c6cece4472ef787ce5c47468ac63b1", 0x4b}, {&(0x7f0000000980)}], 0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x40, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r8, 0x401}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000002c0)={<r9=>r8, 0x1fad}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r9, 0x8}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

19:18:09 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040))
recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1000, 0x69)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)=<r5=>0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000240)={0x1e, 0x37, 0x2, {0x1, 0xc34, 0x0, r5}}, 0x1e)

19:18:09 executing program 1:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x37d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)='$1\x00'}, 0x30)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

19:18:09 executing program 0:
userfaultfd(0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
ioctl$int_in(r2, 0x0, &(0x7f0000000080)=0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:18:09 executing program 2:
userfaultfd(0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
dup(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071")
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  476.583732][   T27] audit: type=1804 audit(1583090289.795:218): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/143/bus" dev="sda1" ino=16833 res=1
19:18:09 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  476.650690][   T27] audit: type=1804 audit(1583090289.855:219): pid=12091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/143/bus" dev="sda1" ino=16833 res=1
19:18:09 executing program 4:
r0 = socket(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x10)
writev(r0, &(0x7f0000000100)=[{0x0}], 0x1)

19:18:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x3b)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b226089f80a4690795a3d769a169c1fae62e7f842c00008dfcdafaa7f47fc159842f3a389c52e41d8f0ee58a7ea83d8453e8f87dc9fde34cd03b7c1c1e301a93d0f873a1d002c5ade3594597d8d17f17011d768f6b23ba596163"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x1d, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000c82fa2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000540))
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3b630f3}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}}, 0x0)

19:18:10 executing program 1:
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x4, 0x0, @empty, @local, {[@hopopts={0x0, 0x0, [], [@ra]}], {0x0, 0x0, 0x8}}}}}}, 0x0)

[  476.921669][   T27] audit: type=1804 audit(1583090290.165:220): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/144/bus" dev="sda1" ino=16849 res=1
19:18:10 executing program 4:
modify_ldt$write2(0x11, 0x0, 0x0)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
dup(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$int_in(r2, 0x5421, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  476.956821][T12110] kvm: pic: single mode not supported
19:18:10 executing program 1:
userfaultfd(0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847")
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:18:10 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:10 executing program 3:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$CAPI_INSTALLED(r0, 0x80024322)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2})

[  476.979230][T12110] kvm: pic: single mode not supported
[  477.305434][   T27] audit: type=1804 audit(1583090290.545:221): pid=12144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/145/bus" dev="sda1" ino=16849 res=1
[  477.344079][T12134] kvm: pic: single mode not supported
[  477.347548][T12127] kvm: pic: single mode not supported
19:18:10 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x37d)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

[  477.352323][T12134] kvm: pic: single mode not supported
19:18:10 executing program 2:
userfaultfd(0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e")
ioctl$int_in(r2, 0x5421, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:18:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9})
dup2(r0, r1)

19:18:10 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1})

19:18:10 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:11 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1})

19:18:11 executing program 4:
userfaultfd(0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:18:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9})
dup2(r0, r1)

[  477.400087][T12127] kvm: pic: single mode not supported
[  477.900015][   T27] audit: type=1804 audit(1583090291.135:222): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/146/bus" dev="sda1" ino=16945 res=1
19:18:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9})
dup2(r0, r1)

19:18:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))

19:18:11 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)

[  478.175121][T12183] kvm: pic: single mode not supported
19:18:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)

[  478.180960][T12183] kvm: pic: single mode not supported
[  478.328614][   T27] audit: type=1804 audit(1583090291.565:223): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/147/bus" dev="sda1" ino=16563 res=1
19:18:11 executing program 1:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)='$1\x00'}, 0x30)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

19:18:11 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  478.492013][T12211] kvm: pic: single mode not supported
[  478.511966][   T27] audit: type=1804 audit(1583090291.645:224): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/147/bus" dev="sda1" ino=16563 res=1
19:18:11 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000a0120000000000003011000000000000000000003011000008120000081200000812000008120000081200000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000008113011000000000000000000000000000000000000000030106367726f7570000000000000000000000000000000000000000000000001010000002e2f6367726f75702e6370752f73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000794830b3c94ffbdc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006800726174656573740000000000000000000000000000000000000000000000626f6e643000000000000000000000006873723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280053594e50524f585900000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000d80000000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)

19:18:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x75, 0x9, 0xd9, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1})

[  478.550080][T12211] kvm: pic: single mode not supported
[  478.709413][T12232] xt_cgroup: invalid path, errno=-2
[  478.880791][   T27] audit: type=1804 audit(1583090292.115:225): pid=12233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/148/bus" dev="sda1" ino=16689 res=1
19:18:12 executing program 4:
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013)
pipe(0x0)
pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0x0)

19:18:12 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x37d)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)='$1\x00'}, 0x30)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

19:18:12 executing program 3:
userfaultfd(0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
mmap(&(0x7f0000675000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0)
userfaultfd(0x0)
shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:18:12 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x37d)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)

19:18:12 executing program 1:
r0 = socket(0x18, 0x2, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getpeername(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc)

19:18:12 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x803, 0xff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:12 executing program 1:
setrlimit(0x8, &(0x7f0000000300))
socketpair(0x11, 0x3, 0x0, 0x0)

19:18:12 executing program 0:
r0 = socket(0x1, 0x3, 0x0)
ioctl$TUNSETVNETBE(r0, 0x5421, &(0x7f0000000040))

19:18:12 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0x0, './file0\x00'}})

19:18:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{}, {}, {0x0, 0x0, 0x0, 0xd3}, {}, {0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$revoke(0x3, 0x0)

19:18:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000002580)={@void, @val={0x0, 0x0, 0x27}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "99fc9e", 0x48, 0x3c, 0x0, @local, @mcast2, {[@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@ipv4={[], [], @empty}, @rand_addr="4cf3dbab6e2f08580b4f661f4979c1e1", @mcast1, @dev]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x900, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0], "ce032480a279209b3126c66ce8b999a763c60c2821d729f2d9aa3b1d775f12dff6773eeda0ba7b3d57767fd76281759c151b74bc56d10949c931602b06a9a5f07438ae7295f1ee8d705cc03a431774ddc3c38b0b2518c952363a00805a00ab6e76ec20ab11c03f3abf35aa68061bd93ea0789099a5040f211dd46bad3137f194bab0084ba07c301754ef6caebf5ed313bec48310ebd304dec3d09d4d8dc26e8ceb93e4290a47861c2ae8a13d1edc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "30e94101202ca00e1960079d2ba9dce0ea5e004de68a0ba5c1f57aaab95f0bd41bd56bf91d82ffd7d785cb6b3ffec306c902be83f9d9d31298cef173deeca378088e030db7f3376f8668d01376903c5c8ff2e7400f8c0f773fe1708dde066759"}, {}, {}, {0x8, 0x6558, 0x0, "a3b3aa6f1d072d761a6005f41d72b63a7fb938e3c4bdcfc4a2df13cffef0ad8c96b2e882fc89425357097dd7532250fdd2a46f4b90384e3444070690dc943c858499a25db767a6d75e571d99d5a091634d7ed4ac9d4f6f2fa79204f6"}}}}}}, 0xfca)

[  479.398559][   T27] audit: type=1804 audit(1583090292.635:226): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/149/bus" dev="sda1" ino=16641 res=1
19:18:12 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003)
close(r0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x8000580, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

19:18:12 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x200000, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="79f43700c98657920000000000000400"}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

19:18:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1)
writev(r0, &(0x7f0000003740)=[{&(0x7f0000000200)="9d974ccbb8651b37e2a99c421e2c5dc104", 0x11}], 0x1)

19:18:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg(r0, &(0x7f000000c0c0)={&(0x7f000000a880)=@xdp, 0x80, &(0x7f000000c000)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/243, 0xfffffef4}, {&(0x7f000000be40)=""/122, 0x7a}, {&(0x7f000000bec0)=""/121, 0x79}], 0x5, 0x0, 0x4000}, 0x0)

19:18:12 executing program 1:
tkill(0xffffffffffffffff, 0x33)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xb1, 0x20100)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000040)='./file0\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
ptrace$getregset(0x4204, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x0, 0x0)
pipe2(&(0x7f0000000140), 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8400, 0x0)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1b8939885ccbb3c3aeead2e22c90fef072256e00e678290f5bb3b5d2fcf887ffa7f0e5b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561a89021a7503a9fc0b01542ab5bd2d23e04b258634bd754c9d2488ad379fadccbfda227bd28f64dff4f39b07fb8286b5f0876a20b9c01607839eaecf5034b7d6979a3687c0fee1514c1c9bb495bb16aa5918341ce8a3d50bd48827a0e142efb278c334ed7c6a4433ae9eabb1ef6d23dcb0c5508c69f31649fac5b3a633f0a72be5a2c877317f609df6ad04d3ea9ffdad4dd"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000451660d185069c26826a00000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000998b4292adaded2d7368abe8847100bd54c94384f593bb5a693e64640abb6072bef1"], 0x3c}}, 0x0)
socket$inet(0x2, 0x80001, 0x84)

19:18:13 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x803, 0xff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:13 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}, {&(0x7f0000002400)="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", 0x342, 0x81}], 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

[  479.942264][T12313] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  479.945868][   T12] libceph: connect (1)[::6]:6789 error -1
[  479.966238][   T12] libceph: mon1 (1)[::6]:6789 connect error
19:18:13 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}, {&(0x7f0000002400)="a3189c56fcb856044efceb12a5941f66e0cdb824d2b9d495a2ade4ab41e3376f4311486d2b20e89633bf02047254ce03f68aa160716986199b91fbaa0fe169d1731f21973e65cc436feb74557d18f597b93c6c6397dae04a7a93af4d6adb8e54d269518c9676b1a881bb31dc81f0d61dc2d499456fb21df8ed9dc1d49e700621208c162bbbf4d9a3a01cd65e9e5a6b454a6d1022331de11bd72032b413be63b84194b0397814f62b016a2ee95575a9b815d92e7411124ce5993326da028ba4559d9239ff03290dc9f863d0810918438a5b9a4ad3bc0e772b4cd1d9a5e4bf7cf13ab0fe9e9a4c2970cd09481f166864ee020e1993b99faae44015306a72945d48ad0c76fb5b7d9e5ddb5aec7f3ff8a295af9ee2e96937a34ca91b749c30fca9d5ed3a4e406fffd11f65bf69afb5b8e5dc8edb765e745163f166fc7ffc8336f17280671e67e90d4d7b1dacc2f3b3a7223bc13d24c532aaeada8d1a36d17825cfc319acea9941857f6a0ecc3557dee2c72dd2948d6fbdacaa78f2975de22ab91c424d6f35fc78423b8107b068150133b34c12febf155065ebec0aa0b11cf163eb7c3a39d71e4acb209c66df3accc4dd2655f24dcbf24d0abf237fa75b556a5737e2703d47994219cc7b5d926d3b17a31033628804856be2b1d10e70a42caddde7c9d943b94fd5423a599d80708d4091cd26b97400f59ac2b662b662a0cbaeb46b564edd67a2bfc47d4837c5c0fc6069f5bc0e5821fc987c8174e36cee40f626852d651a21f1877e1d77d3f43b7bf82699499ee1349ecce05addd4d7ac3c26473bf4060593ac009f026d74a3a25e3fafed007af240f866c56220fc4eb837ed161bc6535e94217e89ae38d7782cdb65978cb091d2d1bc52151a2117f377773a16520a3e1a02b990a542de38f59cd037f9bc12ccefcfa665ff5cd613035a78f66b05276b3395fd7b1da95ad87ef52e35e6fba4b8a69c6ef92b159a2f152da4a75331f9be43da6269feb241deb183dc454174f9b70a82b64c5f12b9181f660cac1ec431bf79b4bf7a458652eee5cf438619233136e965ec6db75e127ad034834ca44a0ebb6aae790990edb7cce54bf540586d812f7c5179b50ba9177c5e9fc38704be934f47572426a64679d8b3edf75839b0e0c7b0edde00ffa96a49ac9a203b7518d3f99d7fceebf65028e71df6c3a48a363e031f984c4cab8442", 0x358, 0x81}], 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}])

[  480.052711][T12313] 8021q: adding VLAN 0 to HW filter on device bond1
[  480.084158][T12324] usb usb2: usbfs: process 12324 (syz-executor.2) did not claim interface 0 before use
19:18:13 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x545c, 0x0)

[  480.211528][   T27] audit: type=1804 audit(1583090293.445:227): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/150/bus" dev="sda1" ino=16930 res=1
[  480.221149][T12328] attempt to access beyond end of device
[  480.242158][T12328] loop3: rw=2049, want=1038, limit=1024
[  480.247705][T12328] Buffer I/O error on dev loop3, logical block 1037, lost async page write
[  480.256373][T12328] attempt to access beyond end of device
[  480.262072][T12328] loop3: rw=2049, want=1039, limit=1024
[  480.267659][T12328] Buffer I/O error on dev loop3, logical block 1038, lost async page write
[  480.276322][T12328] attempt to access beyond end of device
[  480.282183][T12328] loop3: rw=2049, want=1040, limit=1024
[  480.287859][T12328] Buffer I/O error on dev loop3, logical block 1039, lost async page write
[  480.296586][T12328] attempt to access beyond end of device
[  480.303127][   T12] libceph: connect (1)[::6]:6789 error -1
[  480.308904][   T12] libceph: mon1 (1)[::6]:6789 connect error
[  480.314893][T12328] loop3: rw=2049, want=1041, limit=1024
[  480.320573][T12328] Buffer I/O error on dev loop3, logical block 1040, lost async page write
[  480.329580][T12328] attempt to access beyond end of device
[  480.335428][T12328] loop3: rw=2049, want=1090, limit=1024
[  480.341043][T12328] Buffer I/O error on dev loop3, logical block 1089, lost async page write
[  480.349670][T12328] attempt to access beyond end of device
[  480.355599][T12328] loop3: rw=2049, want=1091, limit=1024
19:18:13 executing program 2:
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='lockproto=lock_nck,locktable=.'])

[  480.361205][T12328] Buffer I/O error on dev loop3, logical block 1090, lost async page write
[  480.370781][T12328] attempt to access beyond end of device
[  480.376493][T12328] loop3: rw=2049, want=1092, limit=1024
[  480.382094][T12328] Buffer I/O error on dev loop3, logical block 1091, lost async page write
[  480.390729][T12328] attempt to access beyond end of device
[  480.396506][T12328] loop3: rw=2049, want=1093, limit=1024
[  480.402125][T12328] Buffer I/O error on dev loop3, logical block 1092, lost async page write
[  480.418792][T12335] attempt to access beyond end of device
[  480.424850][T12335] loop3: rw=2049, want=1125, limit=1024
19:18:13 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x803, 0xff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:13 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70200000b400000bfa300000000000024020000fffeffff7a03f0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000007502faff07cd02000404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf36628dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75bb32935f542127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a6084d676d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c984c2406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45577c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb621e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109eb8b3087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc7eafb613313b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691d368dde47e6672e93a314a5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c4d69e5749901b09e4902a6f5addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0aa212b6cb55b9c207bbe08956a2618a05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b775152786118384eebd5fc19"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x200000, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x4002, 0x0)
pipe(&(0x7f0000000000))
close(0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="79f43700c98657920000000000000400"}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

19:18:13 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  480.646493][T12323] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
19:18:13 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$cont(0x20, r0, 0x0, 0x12)

19:18:13 executing program 1:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a840200400402000000f0ffffff6fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0)

[  480.694338][T12306] ceph: No mds server is up or the cluster is laggy
[  480.727166][T12355] usb usb2: usbfs: process 12355 (syz-executor.3) did not claim interface 0 before use
19:18:14 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:14 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  481.068920][T12374] usb usb2: usbfs: process 12374 (syz-executor.3) did not claim interface 0 before use
19:18:14 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:14 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9)
sendto$inet(r2, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write(r2, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc1139ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790fab6745980751ca698dbd91bc", 0x7f37)

[  481.244298][T12378] usb usb2: usbfs: process 12378 (syz-executor.3) did not claim interface 0 before use
19:18:14 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:14 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}, {&(0x7f0000002400)="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", 0x358, 0x81}], 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0xf000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x3000}])

[  481.387939][T12384] usb usb2: usbfs: process 12384 (syz-executor.3) did not claim interface 0 before use
19:18:14 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  481.529351][T12390] attempt to access beyond end of device
[  481.544447][T12390] loop4: rw=2049, want=1038, limit=1024
[  481.555015][T12395] usb usb2: usbfs: process 12395 (syz-executor.3) did not claim interface 0 before use
[  481.561099][T12390] Buffer I/O error on dev loop4, logical block 1037, lost async page write
[  481.576433][T12390] attempt to access beyond end of device
[  481.582337][T12390] loop4: rw=2049, want=1039, limit=1024
[  481.588086][T12390] Buffer I/O error on dev loop4, logical block 1038, lost async page write
[  481.599616][T12390] attempt to access beyond end of device
[  481.606514][T12390] loop4: rw=2049, want=1040, limit=1024
[  481.615356][T12390] attempt to access beyond end of device
[  481.621248][T12390] loop4: rw=2049, want=1041, limit=1024
19:18:14 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:14 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  481.627085][T12390] attempt to access beyond end of device
[  481.635326][T12390] loop4: rw=2049, want=1090, limit=1024
[  481.641119][T12390] attempt to access beyond end of device
[  481.648339][T12390] loop4: rw=2049, want=1091, limit=1024
[  481.657279][T12390] attempt to access beyond end of device
[  481.663168][T12390] loop4: rw=2049, want=1092, limit=1024
[  481.670615][T12390] attempt to access beyond end of device
[  481.678875][T12390] loop4: rw=2049, want=1093, limit=1024
[  481.695262][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  481.695279][   T27] audit: type=1804 audit(1583090294.935:233): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir285825945/syzkaller.7XHZ1c/108/file0/file0" dev="loop4" ino=58 res=1
[  481.806056][T12405] usb usb2: usbfs: process 12405 (syz-executor.3) did not claim interface 0 before use
[  481.824785][   T27] audit: type=1804 audit(1583090295.035:234): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/154/bus" dev="sda1" ino=16519 res=1
19:18:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x40008}, {&(0x7f0000000580)="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", 0x280, 0x81}], 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

19:18:17 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000030601040000000000000000010000060900020073797a320000b7fc05000100070000000900020073797a30000000000900020073797a310000000005000100070000000500010007000000"], 0x50}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)

19:18:17 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc}]}, 0xc4}}, 0x0)

19:18:17 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:17 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r1, 0xd25, 0x0, 0x0, {{0x1, 0x0, 0xf000}, {}, {0x8}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)

[  483.902265][T12420] usb usb2: usbfs: process 12420 (syz-executor.3) did not claim interface 0 before use
19:18:17 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000002580)={@void, @val={0x0, 0x0, 0x48}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "99fc9e", 0x48, 0x29, 0x0, @local, @mcast2, {[@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@ipv4={[], [], @empty}, @rand_addr="4cf3dbab6e2f08580b4f661f4979c1e1", @mcast1, @dev]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x900, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0], "ce032480a279209b3126c66ce8b999a763c60c2821d729f2d9aa3b1d775f12dff6773eeda0ba7b3d57767fd76281759c151b74bc56d10949c931602b06a9a5f07438ae7295f1ee8d705cc03a431774ddc3c38b0b2518c952363a00805a00ab6e76ec20ab11c03f3abf35aa68061bd93ea0789099a5040f211dd46bad3137f194bab0084ba07c301754ef6caebf5ed313bec48310ebd304dec3d09d4d8dc26e8ceb93e4290a47861c2ae8a13d1edc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "30e94101202ca00e1960079d2ba9dce0ea5e004de68a0ba5c1f57aaab95f0bd41bd56bf91d82ffd7d785cb6b3ffec306c902be83f9d9d31298cef173deeca378088e030db7f3376f8668d01376903c5c8ff2e7400f8c0f773fe1708dde066759"}, {}, {}, {0x8, 0x6558, 0x0, "a3b3aa6f1d072d761a6005f41d72b63a7fb938e3c4bdcfc4a2df13cffef0ad8c96b2e882fc89425357097dd7532250fdd2a46f4b90384e3444070690dc943c858499a25db767a6d75e571d99d5a091634d7ed4ac9d4f6f2fa79204f6"}}}}}}, 0xfca)

19:18:17 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x1800000000000060, 0xf, 0x0, &(0x7f0000000040)="480e003f0007007e5bc5795e86dda5", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40)

19:18:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20}, 0x10)
sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ced5d4dd6e92aa62aa7d935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060ff01c4", 0xb9, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0)

[  484.046682][   T27] audit: type=1804 audit(1583090297.285:235): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir843751979/syzkaller.oJN0vF/136/file0" dev="sda1" ino=17144 res=1
19:18:17 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)

[  484.165392][   T27] audit: type=1804 audit(1583090297.285:236): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/155/bus" dev="sda1" ino=17143 res=1
[  484.242684][T12440] usb usb2: usbfs: process 12440 (syz-executor.3) did not claim interface 0 before use
19:18:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"2685c233d3590d56b9eddbb2105271424ac47914f236d1eceb8cc3ae146030619d762d0d56328de9f6ce626a4e60eb3aa5c21dd0bac47c237eed17f64a9cd6add6ccea55a183fb7ff47fa10bfae15c5b8cd5720199ce59e24e010d33649008dc4bc2ab5ff9688d05b7b57ef2d959920eeb8deed49db650018b75a08df19445ea209455a4862cc6e9c00e3960c44fa3c17553898da506b8a259edf0064e2d8bfff341357bf18fb02b8fc75c4183d0eb7bd6d5b842fd91ad32a6cdd588907477822149a54c33ae786c3fa220717135906b5fe045cac9daff8bc289f5b91919d9667404b9dad9c9f53b8020f64c9e7c717b2ac7ad3a3a14f3c872b32dab31e583d077646b6d6ab8420e12acd9117a589f10a1025b4b8e3f6cabc31f6c65dd187c6162881067667cd6497b168b6741efc85f3537c8039ca0646544391e2135cf7f8310fe742da52a5b2e708c151c6b29d3512078433ba2784a624c06b58d8ca7f69dacc5193e200a52dfd30dda171635fea073350add6224106e5057b85d49846d9e1465fb24dbc8301c39614f2f2bdeed937dfaf6e172b29dff9c6afab64cc19663701ff53d3eefb4f5adad00e82c0319bd6191562792f041d5d409ca46b1b9bc6439f28cc90b96701215fb445d7a6c1cc6620c1ddcae3dab3923eaff154cce238d89623b7813d15afeb6e42672d33b99e20db0bcf282d34c28b121e0f66c43e36c1eb956733acec3c787f01f28b9d56fb0cc5ed7e934986d1472ad8251d906a5168badb5872b65a35e671cea4842c55e796e99176f92968b2b7d558d59c745e0d03608a80c54214e90a7b7e630a1f102b385631783643bd09c8debbd0922eb67fad6e3ac1695afcf045027b8c6e0feea416225da0b75f1f73d6b96bcef7847969b17a142600fef0d073db2c207be34bf12613236b6e957ecaf09515799cb028bc35f684f97656d32927f3e76f598a91d2239e2218f0b98d103f7bbe0647835df647f0cf1509020f6f88b53fba39f44c8a8f128c62a805c98fc88b68935f2bf563d5bb7b1a30975276b485d4bc365f08f98e012efe07ecb73b4eba6ea759f5f3a8c23432cae8233fedbf00d6363c758beba41d6fc5304e8006a955c79b09d305891f971aa0a98ad04acb6931ff387697104f6d0787e612bf165e75dd504611b2bd27e2774f03887d20c4c73a12bd538c10b97e442e22048eac044d563171525c17a18f1d1823ca749e24967fc3761c1fb08fd322f3a56015b9223bc8d96de5d604dc9738d40884c3b7254f7fefede40a7ccd3dfa5df00745552415bd4f7d63eb8cf10d660dce044855c3b1f6ec2c39e53ac3ca2a3f20fb0d07f9834cb039c8e46c9e8522141995d77a511d2d2f79a76d5539a89e95374a18f475043b145280ce3dc0ded4ca2f2b178d25ed7e5b414df52d43751992356a674c3d642139885fb5300"})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))

19:18:17 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:17 executing program 4:
syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
geteuid()
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xc0fe)

19:18:17 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  484.522526][   T27] audit: type=1804 audit(1583090297.765:237): pid=12451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/156/bus" dev="sda1" ino=17121 res=1
19:18:17 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f30000007d00000005d400000000000005000000"], 0x14)

[  484.644788][T12463] usb usb2: usbfs: process 12463 (syz-executor.3) did not claim interface 0 before use
19:18:17 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

19:18:17 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7b)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x14}, 0x1c)
sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0)

19:18:18 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:18 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='F'})

19:18:18 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8080)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendto$inet6(r0, &(0x7f00000003c0)='T', 0x1, 0x0, 0x0, 0x0)

[  484.972946][T12478] usb usb2: usbfs: process 12478 (syz-executor.3) did not claim interface 0 before use
[  485.045286][   T27] audit: type=1804 audit(1583090298.275:238): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/157/bus" dev="sda1" ino=17129 res=1
19:18:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="67360f01c9c7442400fbffffffc744240296050000c7442406000000000f011c240f32660fc7b58e00000066b8be008ee066baf80cb8281c3c8cef66bafc0cb80f000000ef66b8e7008ed00f0766f2a7f4", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:18 executing program 0:
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="6380c2000000aaaaaaaaaa008100000086dd60d1cf0000442f00f7754c275336761812dd270000000000fe8000000000000000000000000000aa04206558000000000000080000003b3986dd080088c000000000100000000100000000003f00080022eb00000008200000010268d1138cd722882bf292d50000000000000000"], 0x0)

19:18:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x54, 0x6, 0x0, @remote, @local={0xfe, 0x80, [0x3]}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "82dd214d3b0edaf79ef4805be76f69ee"}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x100, "8826a5ba005aff64a739fa29597b4b2552f12cfd7489d1b64008a97bca4d"}]}}}}}}}}, 0x0)

19:18:18 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:18 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:18 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)

[  485.442462][T12506] usb usb2: usbfs: process 12506 (syz-executor.3) did not claim interface 0 before use
19:18:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x8a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x54, 0x6, 0x0, @remote, @local={0xfe, 0x80, [0x0, 0x0, 0x3]}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "82dd214d3b0edaf79ef4805be76f69ee"}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x100, "8826a5ba005aff64a739fa29597b4b2552f12cfd7489d1b64008a97bca4d"}]}}}}}}}}, 0x0)

19:18:18 executing program 1:
syz_emit_ethernet(0x8a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x54, 0x6, 0x0, @remote, @local={0xfe, 0x80, [0x2]}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "82dd214d3b0edaf79ef4805be76f69ee"}, @mptcp=@remove_addr={0x1e, 0x21, 0x0, 0x100, "8826a5ba005aff64a739fa29597b4b2552f12cfd7489d1b64008a97bca4d"}]}}}}}}}}, 0x0)

19:18:18 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  485.560220][   T27] audit: type=1804 audit(1583090298.795:239): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/158/bus" dev="sda1" ino=17151 res=1
19:18:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000001100), &(0x7f0000001180)=0x4)

19:18:19 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="0000000019a100f15700", 0x0, 0x0, 0x2, 0x1}, 0x20)

19:18:19 executing program 1:
setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000)="c15c98ed70b6376e", 0x8)
r0 = socket$inet6(0x10, 0x2, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="104000000a14"], 0x1}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b)

[  485.759506][T12524] usb usb2: usbfs: process 12524 (syz-executor.3) did not claim interface 0 before use
19:18:19 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:19 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:19 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x600}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}}}}}}}, 0x6c)

[  485.914937][T12535] netlink: 16437 bytes leftover after parsing attributes in process `syz-executor.1'.
19:18:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000040)={0x10c, r2, 0x3ab97855f46285f, 0x0, 0x0, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x5, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x10c}}, 0x0)

19:18:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty=0xffffffff}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x20020000}}}}}}, 0x0)

[  486.068339][T12544] usb usb2: usbfs: process 12544 (syz-executor.3) did not claim interface 0 before use
[  486.138151][   T27] audit: type=1804 audit(1583090299.375:240): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/159/bus" dev="sda1" ino=17142 res=1
[  486.243720][T12555] sit: Dst spoofed 0.0.0.0/2002:: -> 255.255.255.255/2002::700:0
[  486.396487][T12555] sit: Dst spoofed 0.0.0.0/2002:: -> 255.255.255.255/2002::700:0
19:18:19 executing program 4:
unshare(0x20600)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
tee(r0, r2, 0x80000000, 0x0)

19:18:19 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:19 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x3580, 0x0, 0x29, 0x0, @remote, @broadcast}}}}}}, 0x6a)

19:18:19 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty=0xffffffff}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x20020000}}}}}}, 0x0)

19:18:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000000}]}, {0x4}}}]}]}, 0x50}}, 0x0)

[  486.701520][T12564] sit: Dst spoofed 0.0.0.0/2002:: -> 255.255.255.255/2002::700:0
19:18:20 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:20 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffde2, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000034000505d25a80648c63940d0324fc60100000000a00020005358221f0792e373500098000f01700d1bd", 0x33fe0}], 0x1}, 0x20008840)

[  486.840468][   T27] audit: type=1804 audit(1583090300.075:241): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/160/bus" dev="sda1" ino=17152 res=1
19:18:20 executing program 4:

19:18:20 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  486.996216][T12583] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
[  487.037078][T12583] netlink: 18386 bytes leftover after parsing attributes in process `syz-executor.1'.
19:18:20 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:20 executing program 2:

19:18:20 executing program 4:

[  487.125099][   T27] audit: type=1804 audit(1583090300.365:242): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/161/bus" dev="sda1" ino=17158 res=1
19:18:20 executing program 1:

[  487.251016][   T27] audit: type=1804 audit(1583090300.415:243): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/161/bus" dev="sda1" ino=17158 res=1
19:18:20 executing program 0:

19:18:20 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:20 executing program 2:

19:18:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@can_delroute={0x20, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xa, 0x0)

19:18:20 executing program 3:
r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:20 executing program 1:

19:18:20 executing program 2:

19:18:20 executing program 4:

19:18:20 executing program 1:

[  487.626659][   T27] audit: type=1804 audit(1583090300.865:244): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/162/bus" dev="sda1" ino=17156 res=1
19:18:20 executing program 3:
r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:20 executing program 0:

19:18:21 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:21 executing program 2:

19:18:21 executing program 1:

19:18:21 executing program 4:

19:18:21 executing program 2:

19:18:21 executing program 3:
r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:21 executing program 0:

[  487.999513][   T27] audit: type=1804 audit(1583090301.235:245): pid=12628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/163/bus" dev="sda1" ino=17164 res=1
19:18:21 executing program 1:

19:18:21 executing program 4:

19:18:21 executing program 5:
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  488.193394][   T27] audit: type=1804 audit(1583090301.295:246): pid=12628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/163/bus" dev="sda1" ino=17164 res=1
19:18:21 executing program 2:

19:18:21 executing program 0:

19:18:21 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:21 executing program 4:

[  488.365808][   T27] audit: type=1804 audit(1583090301.605:247): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/164/bus" dev="sda1" ino=17161 res=1
19:18:21 executing program 0:

19:18:21 executing program 1:

19:18:21 executing program 5:
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:21 executing program 2:

19:18:21 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:21 executing program 4:

[  488.661806][   T27] audit: type=1804 audit(1583090301.905:248): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/165/bus" dev="sda1" ino=17156 res=1
19:18:21 executing program 0:

19:18:22 executing program 2:

19:18:22 executing program 5:
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:22 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:22 executing program 1:

19:18:22 executing program 4:

19:18:22 executing program 0:

19:18:22 executing program 2:

19:18:22 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  489.004595][   T27] audit: type=1804 audit(1583090302.245:249): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/166/bus" dev="sda1" ino=16548 res=1
19:18:22 executing program 1:

19:18:22 executing program 0:

19:18:22 executing program 4:

19:18:22 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:22 executing program 2:

19:18:22 executing program 1:

19:18:22 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:22 executing program 0:

19:18:22 executing program 4:

[  489.369857][   T27] audit: type=1804 audit(1583090302.605:250): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/167/bus" dev="sda1" ino=16548 res=1
19:18:22 executing program 2:

19:18:22 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:22 executing program 1:

19:18:22 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:22 executing program 4:

19:18:22 executing program 0:

19:18:23 executing program 2:

19:18:23 executing program 4:

19:18:23 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:23 executing program 1:

19:18:23 executing program 0:

19:18:23 executing program 2:

19:18:23 executing program 4:

19:18:23 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  489.978311][T12735] usb usb2: usbfs: process 12735 (syz-executor.3) did not claim interface 0 before use
19:18:23 executing program 1:

19:18:23 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:23 executing program 0:

19:18:23 executing program 2:

19:18:23 executing program 4:

19:18:23 executing program 1:

[  490.304070][T12753] usb usb2: usbfs: process 12753 (syz-executor.3) did not claim interface 0 before use
19:18:23 executing program 2:

19:18:23 executing program 0:

19:18:23 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:23 executing program 4:

19:18:23 executing program 1:

19:18:23 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:23 executing program 2:

19:18:23 executing program 0:

[  490.593495][T12772] usb usb2: usbfs: process 12772 (syz-executor.3) did not claim interface 0 before use
19:18:23 executing program 4:

19:18:23 executing program 1:

19:18:24 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:24 executing program 2:

19:18:24 executing program 0:

19:18:24 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:24 executing program 4:

[  490.898348][T12785] usb usb2: usbfs: process 12785 (syz-executor.3) did not claim interface 0 before use
19:18:24 executing program 1:

19:18:24 executing program 2:

19:18:24 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:24 executing program 0:

19:18:24 executing program 4:

[  491.164203][T12805] usb usb2: usbfs: process 12805 (syz-executor.3) did not claim interface 0 before use
19:18:24 executing program 2:

19:18:24 executing program 1:

19:18:24 executing program 0:

19:18:24 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:24 executing program 4:

19:18:24 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:24 executing program 2:

19:18:24 executing program 0:

[  491.446263][T12820] usb usb2: usbfs: process 12820 (syz-executor.3) did not claim interface 0 before use
19:18:24 executing program 1:

19:18:24 executing program 4:

19:18:24 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:24 executing program 2:

19:18:24 executing program 0:

19:18:24 executing program 1:

[  491.724585][T12832] usb usb2: usbfs: process 12832 (syz-executor.3) did not claim interface 0 before use
19:18:25 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:25 executing program 2:

19:18:25 executing program 4:

19:18:25 executing program 0:

19:18:25 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:25 executing program 1:

19:18:25 executing program 4:

19:18:25 executing program 0:

19:18:25 executing program 2:

[  492.016712][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  492.016734][   T27] audit: type=1804 audit(1583090305.255:261): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/173/bus" dev="sda1" ino=16977 res=1
[  492.114444][T12853] usb usb2: usbfs: process 12853 (syz-executor.3) did not claim interface 0 before use
[  492.138717][   T27] audit: type=1804 audit(1583090305.375:262): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/173/bus" dev="sda1" ino=16977 res=1
19:18:25 executing program 0:

19:18:25 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:25 executing program 2:

19:18:25 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:25 executing program 1:

19:18:25 executing program 4:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r2 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r2, 0x31)
sendfile(r0, r1, 0x0, 0xedc0)

19:18:25 executing program 0:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)

[  492.422342][T12871] usb usb2: usbfs: process 12871 (syz-executor.3) did not claim interface 0 before use
19:18:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002e000703ee00"/20, @ANYRES32, @ANYBLOB="00000000000000000000f1ff0c0001d8510870d00acfa57797"], 0x3}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:25 executing program 1:
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x13)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, ':-#[#'}}, {@access_client='access=client'}]}})

19:18:25 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:25 executing program 4:

[  492.575798][   T27] audit: type=1804 audit(1583090305.815:263): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/174/bus" dev="sda1" ino=16563 res=1
19:18:25 executing program 0:

[  492.700074][T12894] usb usb2: usbfs: process 12894 (syz-executor.3) did not claim interface 0 before use
[  492.718292][   T27] audit: type=1804 audit(1583090305.955:264): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/174/bus" dev="sda1" ino=16563 res=1
19:18:26 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0xf0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x40086607, &(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xffffffff, 0x2, @perf_bp={0x0}})
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socket$kcm(0xa, 0x0, 0x11)

19:18:26 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:26 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x35f, 0x80ffff, 0x80ffff, 0x2e, 0x5f, 0x2]}, 0x3c)

19:18:26 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:26 executing program 4:
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, ':-#[#'}, 0x8}]}})

[  493.017704][   T27] audit: type=1804 audit(1583090306.255:265): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/175/bus" dev="sda1" ino=16993 res=1
[  493.035372][T12914] usb usb2: usbfs: process 12914 (syz-executor.3) did not claim interface 0 before use
19:18:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x35f, 0x80ffff, 0x80ffff, 0x2e, 0x5f, 0x2]}, 0x3c)

19:18:26 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  493.128460][   T27] audit: type=1804 audit(1583090306.315:266): pid=12917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/175/bus" dev="sda1" ino=16993 res=1
[  493.184005][T12929] usb usb7: usbfs: process 12929 (syz-executor.1) did not claim interface 0 before use
19:18:26 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
r2 = socket(0x2, 0x803, 0xff)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
connect$inet(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = dup(r4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:26 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:26 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
dup(r0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x8000000a, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
pipe(&(0x7f0000000000))
getdents(r2, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13)
sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38}, 0x0)
tkill(r1, 0x5)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200))
ptrace$cont(0x9, r1, 0x0, 0x0)

19:18:26 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
pipe(&(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0xf0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x1, 0xff, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}, 0x10292, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socket$kcm(0xa, 0x0, 0x11)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

19:18:26 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  493.372469][T12942] usb usb2: usbfs: process 12942 (syz-executor.3) did not claim interface 0 before use
[  493.395331][   T27] audit: type=1804 audit(1583090306.635:267): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/176/bus" dev="sda1" ino=16625 res=1
19:18:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x35f, 0x80ffff, 0x80ffff, 0x2e, 0x5f, 0x2]}, 0x3c)

19:18:26 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  493.532370][   T27] audit: type=1804 audit(1583090306.775:268): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/176/bus" dev="sda1" ino=16625 res=1
19:18:26 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:26 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x35f, 0x80ffff, 0x80ffff, 0x2e, 0x5f, 0x2]}, 0x3c)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

19:18:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fd", &(0x7f0000000240)="8acd8d45a550550fd246178d3b02ee7bd486cb71bc4b986492b1080c288bb6985cf6166cc1bfb97f83eab3df9cd6f6e0171553b1fb3d448a5e13de67374fc9532862fe6f68e3ffe8399f67345d30720422892c1f496ee6c6e3dd7e0fb5435f60fdc472ce00bec4da9df2bec4be0d5205997dbf54ce6f7359c05a85ac487e66f66349a703a3f9373c621f295dd49f795a88", 0x32, 0x91})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
read$usbfs(r3, &(0x7f00000001c0)=""/120, 0x78)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  493.643905][T12967] usb usb2: usbfs: process 12967 (syz-executor.3) did not claim interface 0 before use
19:18:26 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x803, 0xff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
connect$inet(r1, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:27 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sysfs$1(0x1, &(0x7f00000003c0)='ceph\x00')

19:18:27 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:27 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
write$P9_RSTATFS(r0, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x0, 0x4, 0x9ac4, 0x7, 0xffffffffffffffe0, 0x7, 0xcc, 0x0, 0x200}}, 0x43)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)

[  493.906171][T12989] usb usb2: usbfs: process 12989 (syz-executor.3) did not claim interface 0 before use
19:18:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fd", &(0x7f0000000240)="8acd8d45a550550fd246178d3b02ee7bd486cb71bc4b986492b1080c288bb6985cf6166cc1bfb97f83eab3df9cd6f6e0171553b1fb3d448a5e13de67374fc9532862fe6f68e3ffe8399f67345d30720422892c1f496ee6c6e3dd7e0fb5435f60fdc472ce00bec4da9df2bec4be0d5205997dbf54ce6f7359c05a85ac487e66f66349a703a3f9373c621f295dd49f795a88", 0x32, 0x91})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="0fd357608799"}, 0x10)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  494.011450][   T27] audit: type=1804 audit(1583090307.255:269): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/177/bus" dev="sda1" ino=16913 res=1
19:18:27 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:27 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)

[  494.186548][   T27] audit: type=1804 audit(1583090307.295:270): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/177/bus" dev="sda1" ino=16913 res=1
19:18:27 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)

19:18:27 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x803, 0xff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xc0fe)

19:18:27 executing program 1:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_open_procfs(0x0, 0x0)
mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2)

[  494.382264][T13020] usb usb2: usbfs: process 13020 (syz-executor.3) did not claim interface 0 before use
19:18:27 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)

19:18:27 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fde5a993dc248d6f9661d58b696218f1", 0x0, 0x41})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  494.586281][T13034] usb usb2: usbfs: process 13034 (syz-executor.3) did not claim interface 0 before use
19:18:27 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:27 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0)

19:18:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002e000703ee00"/20, @ANYRES32, @ANYBLOB="00000000000000000000f1ff0c0001d8510870d00acfa57797"], 0x3}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:27 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x803, 0xff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:28 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  494.784922][T13045] usb usb2: usbfs: process 13045 (syz-executor.3) did not claim interface 0 before use
19:18:28 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:28 executing program 4:
getpid()
sched_setattr(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:18:28 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:28 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0xff)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:28 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x2, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x5f, 0x35f, 0x80ffff, 0x80ffff, 0x2e, 0x5f, 0x2]}, 0x3c)

[  495.083153][T13068] usb usb2: usbfs: process 13068 (syz-executor.3) did not claim interface 0 before use
19:18:28 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fd", &(0x7f0000000240)="8acd8d45a550550fd246178d3b02ee7bd486cb71bc4b986492b1080c288bb6985cf6166cc1bfb97f83eab3df9cd6f6e0171553b1fb3d448a5e13de67374fc9532862fe6f68e3ffe8399f67345d30720422892c1f496ee6c6e3dd7e0fb5435f60fdc472ce00bec4da9df2bec4be0d5205997dbf54ce6f7359c05a85ac487e66f66349a703a3f9373c621f295dd49f795a88", 0x32, 0x91})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:28 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:28 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fde5a993dc248d6f9661d58b696218f1", &(0x7f0000000240)="8acd8d45a550550fd246178d3b02ee7bd486cb71bc4b986492b1080c288bb6985cf6166cc1bfb97f83eab3df9cd6f6e0171553b1fb3d448a5e13de67374fc9532862fe6f68e3ffe8399f67345d30720422892c1f496ee6c6e3dd7e0fb5435f60fdc472ce00bec4da9df2bec4be0d5205997dbf54ce6f7359c05a85ac487e66f66349a703a3f9373c621f295dd49f795a88", 0x41, 0x91})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:28 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:28 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:28 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:28 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0)

19:18:28 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x3, 0x0})
fcntl$getown(r0, 0x9)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8008550e, &(0x7f00000000c0))

19:18:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fde5a993dc248d6f9661d58b696218f1", &(0x7f0000000240)="8acd8d45a550550fd246178d3b02ee7bd486cb71bc4b986492b1080c288bb6985cf6166cc1bfb97f83eab3df9cd6f6e0171553b1fb3d448a5e13de67374fc9532862fe6f68e3ffe8399f67345d30720422892c1f496ee6c6e3dd7e0fb5435f60fdc472ce00bec4da9df2bec4be0d5205997dbf54ce6f7359c05a85ac487e66f663", 0x41, 0x81})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:29 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:29 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:29 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
dup(r0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x8000000a, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
pipe(&(0x7f0000000000))
getdents(r2, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13)
sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
tkill(r1, 0x5)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200))
ptrace$cont(0x9, r1, 0x0, 0x0)

19:18:29 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = open(0x0, 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}]})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:29 executing program 2:
syz_emit_ethernet(0xda, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:29 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)

19:18:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

19:18:29 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:29 executing program 2:
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

19:18:29 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)

19:18:29 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
ftruncate(r1, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = dup(r2)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:29 executing program 2:
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

19:18:29 executing program 2:
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

19:18:29 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)

19:18:29 executing program 0:
fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r2 = gettid()
tkill(r2, 0x1000000000016)
prctl$PR_GET_SECCOMP(0x15)
ptrace(0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)

[  496.749243][T13169] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
19:18:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = dup(r0)
bind$llc(r1, 0x0, 0x0)

19:18:30 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}]}]}}}}}}}, 0x0)

19:18:30 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:30 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = open(0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

19:18:30 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = dup(r1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:30 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}]}]}}}}}}}, 0x0)

[  497.147322][   T27] kauditd_printk_skb: 12 callbacks suppressed
[  497.147342][   T27] audit: type=1804 audit(1583090310.385:283): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/184/bus" dev="sda1" ino=17210 res=1
19:18:30 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:30 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001500add427323b472545a45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d2d82817a90d626c65280003ffffffffff", 0x4d}], 0x1)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000012000100000000000000000000000000000000000000000000d56348ca730c24b83678c9b80b7ae26e0000006c00000000000000e44ed6d0a65906a1ae0d6c91ac9b8f926d6f8e8faece8968c7726ccbace7d7b00de2a75054b140732e462eb9c3f2e18e927df9c558b8c62872e6d13922a5d65ff7ee725a5fa6fa106f3c17ff16fa64718587d99836c10a8f19f64566457e995c07d2824311b424c8a91d3055bb0a7b1481c382ffc3edf7fdc3b5d4"], 0x28}, 0x8}, 0x0)

[  497.199203][T13222] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  497.234679][T13222] team0: Device macvtap0 is up. Set it down before adding it as a team port
[  497.286445][T13222] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  497.287174][   T27] audit: type=1804 audit(1583090310.435:284): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/184/bus" dev="sda1" ino=17210 res=1
[  497.314679][T13222] team0: Device macvtap0 is up. Set it down before adding it as a team port
19:18:30 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}]}]}}}}}}}, 0x0)

19:18:30 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x8008550e, &(0x7f00000000c0))

19:18:30 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = dup(r1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  497.614993][   T27] audit: type=1804 audit(1583090310.855:285): pid=13246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/185/bus" dev="sda1" ino=17188 res=1
[  497.687204][   T27] audit: type=1804 audit(1583090310.925:286): pid=13249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/185/bus" dev="sda1" ino=17188 res=1
19:18:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@remote, 0x8})
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}]})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:33 executing program 4:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1}}], 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

19:18:33 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:33 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}]}]}}}}}}}, 0x0)

19:18:33 executing program 1:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c)
listen(r0, 0x1a6)
r1 = socket$inet6(0xa, 0x80006, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)

19:18:33 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(r0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = dup(r1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:33 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}]}]}}}}}}}, 0x0)

19:18:33 executing program 1:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x2007fff)
r1 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8482)

19:18:33 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  499.872882][   T27] audit: type=1804 audit(1583090313.115:287): pid=13258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/186/bus" dev="sda1" ino=17228 res=1
[  499.976781][   T27] audit: type=1804 audit(1583090313.205:288): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/186/bus" dev="sda1" ino=17228 res=1
19:18:33 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000001540)=0x77622d0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r5 = dup2(r0, r0)
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

19:18:33 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:33 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  500.179038][   T27] audit: type=1804 audit(1583090313.415:289): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir244623290/syzkaller.GfX2Hf/191/bus" dev="sda1" ino=17209 res=1
19:18:33 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}]}]}}}}}}}, 0x0)

[  500.252930][   T27] audit: type=1804 audit(1583090313.485:290): pid=13290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir244623290/syzkaller.GfX2Hf/191/bus" dev="sda1" ino=17209 res=1
[  500.340158][   T27] audit: type=1800 audit(1583090313.525:291): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17209 res=0
[  500.376689][   T27] audit: type=1800 audit(1583090313.525:292): pid=13290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17209 res=0
19:18:33 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:33 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0xf0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xffffffff, 0x2, @perf_bp={0x0}, 0x6})
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socket$kcm(0xa, 0x0, 0x11)

19:18:33 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:33 executing program 4:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1}}], 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x14}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

19:18:33 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00')
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan1\x00'})
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e)

19:18:33 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  500.753955][T13309] ubi0: attaching mtd0
[  500.767758][T13309] ubi0: scanning is finished
19:18:34 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:34 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00')
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xffffffff)

[  500.873173][T13309] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  500.897617][T13309] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  500.918929][T13309] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  500.933983][T13309] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  500.934713][T13334] usb usb2: usbfs: process 13334 (syz-executor.3) did not claim interface 0 before use
[  500.951564][T13309] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  500.958562][T13309] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
19:18:34 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  500.986455][T13309] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 935297722
[  501.006758][T13309] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
19:18:34 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  501.043167][T13328] ubi0: background thread "ubi_bgt0d" started, PID 13328
19:18:34 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  501.098435][T13309] ubi0: detaching mtd0
[  501.128733][T13309] ubi0: mtd0 is detached
19:18:34 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:34 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  501.155561][T13346] usb usb2: usbfs: process 13346 (syz-executor.3) did not claim interface 0 before use
[  501.162525][T13345] ubi0: attaching mtd0
[  501.193357][T13345] ubi0: scanning is finished
19:18:34 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  501.261855][T13345] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  501.335440][T13357] usb usb2: usbfs: process 13357 (syz-executor.3) did not claim interface 0 before use
19:18:35 executing program 4:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0)

19:18:35 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:18:35 executing program 3:
unshare(0x400)
r0 = socket(0x1e, 0x4, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

19:18:35 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:35 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:35 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:35 executing program 3:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x2007fff)
r1 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8482)

[  501.962770][T13379] usb usb7: usbfs: process 13379 (syz-executor.0) did not claim interface 0 before use
[  501.964388][T13381] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use)
19:18:35 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:35 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x35f, 0x80ffff, 0x80ffff, 0x2e, 0x5f, 0x2]}, 0x3c)

19:18:35 executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0xf0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, &(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_bp={0x0}})
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)

19:18:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fd", &(0x7f0000000240)="8acd8d45a550550fd246178d3b02ee7bd486cb71bc4b986492b1080c288bb6985cf6166cc1bfb97f83eab3df9cd6f6e0171553b1fb3d448a5e13de67374fc9532862fe6f68e3ffe8399f67345d30720422892c1f496ee6c6e3dd7e0fb5435f60fdc472ce00bec4da9df2bec4be0d5205997dbf54ce6f7359c05a85ac487e66f663", 0x32, 0x81})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
bind$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x2, 0x0, 0x0, @random="0fd357608799"}, 0x10)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:18:35 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  502.310535][T13399] EXT4-fs warning (device sda1): ext4_group_extend:1746: can't shrink FS - resize aborted
[  502.350564][   T27] kauditd_printk_skb: 7 callbacks suppressed
19:18:35 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  502.350599][   T27] audit: type=1804 audit(1583090315.585:300): pid=13406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir224817648/syzkaller.R8swaT/179/bus" dev="sda1" ino=17252 res=1
19:18:35 executing program 0:
pipe(&(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup(r4)
r5 = inotify_init()
dup(r5)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8, @ANYBLOB="a8c02ebb4e193d54e0dc61c1e6e83b0c689fe17ee82c4dd005bbdef6472d1b691046778ec4f011f895d64a5dbe9714a44619a33ec8362659dc42bc7fb12973df7603d32b086ffb54b834e1f76cfd676d364d83e71a4b35a6b6034788c9ab263dde8025bbe37a2373ea7f38bc4544f8b768a6f1ce6a3691b5cbdb780362e71bf7ef93eaff2131f9769d53a4f778ac16d6443ba9fecdc0628cc67b6995b69df69f13112646d8656c280ea9b3ab59d6241fff22dc1370f715d44f56f7e00c6b28324ec58453bdc91f72080561ebdee4676ab8194b3448e402042d763d4fcba89efac5070e72"], 0x3c}}, 0x0)

19:18:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$VT_SETMODE(r2, 0x5602, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000cbb1000000000000000000fdffffff00000000000000000000000000000000000000000000000000000000df11add096f9a9f710825612ae44cd95d3fe979bc3c55ca2a531d7425b591be498d638d8cca5085b3bcc11bdbdf0d40f9745d510a41074517e5fc5e3187bfb4292a02e98e458bc73ad0c06ac074ce6a8eb6ed2f74e739127aaf8bc6a1be47994bc"])
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  502.408593][   T27] audit: type=1800 audit(1583090315.635:301): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17252 res=0
[  502.428407][   T27] audit: type=1800 audit(1583090315.635:302): pid=13406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17252 res=0
19:18:35 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xe43)
r0 = socket$kcm(0x10, 0x2, 0x0)
fchdir(0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0)
setxattr$security_ima(0x0, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x2)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

[  502.552013][   T27] audit: type=1804 audit(1583090315.795:303): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/190/bus" dev="sda1" ino=17248 res=1
[  502.576035][T13421] batman_adv: batadv0: Adding interface: bridge1
19:18:35 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  502.641146][T13421] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.655675][   T27] audit: type=1804 audit(1583090315.795:304): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/190/bus" dev="sda1" ino=17248 res=1
19:18:35 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:36 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  502.746588][T13421] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active
[  502.796100][T13437] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
19:18:36 executing program 0:
pipe(&(0x7f0000000240))
close(0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0)
socket$inet(0x2, 0x3, 0x83)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x1f, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
socket(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x0, 0x0})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000d50104000000000100000000dcdf6c68a94a86be9084baa5b5db9700000068000a01008000008849f9db74efa91d3920763f0362391c57bc2475cc64746c0435cbdb7c65f8cf8d8886dcb9e9c7469fee863a83859231aecd93c4c555c2780731a7a9fc14aea3a2c647d99b4401087f000000000000526d425c5004003b0aee1aac493885a1a42965f3050d482052a650cb53fe6c7284839219f4e2d97c8a81795ab722bf5a4520000b27a497823cc021c26f5c893922244d0dc28f731c11cdd80749408672f6ce8dfb1dfd225b35bf3cdbb25743ac3e5bc639537e85ef7c7bb5a11b523538a12ef3ce0932bdf3b7aef36e1d8e01f752656b0400748939ec04fd63b27529ac785bad51800132aa67f540813b3077857a1518880a8d1a6dd8e65798fb8efe69b3f770f25c68965ccbf458ccba9f6667d64a10408de2"], 0x13f)
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/160, 0xfe78}], 0x1)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  502.884290][T13437] team0: Device macvtap0 is up. Set it down before adding it as a team port
[  502.932659][T13450] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  502.940336][   T27] audit: type=1804 audit(1583090316.175:305): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/191/bus" dev="sda1" ino=16865 res=1
[  502.965638][T13450] team0: Device macvtap0 is up. Set it down before adding it as a team port
19:18:36 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  502.989862][   T27] audit: type=1804 audit(1583090316.225:306): pid=13440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/191/bus" dev="sda1" ino=16865 res=1
19:18:36 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz0\x00')
openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0)
bind$isdn(r1, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'})
sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0xffffff7a}}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x400)
r2 = syz_open_procfs(0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3})
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r3, 0x6)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0x5}, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000600)='auxv\x00')
ioctl$int_out(r6, 0x5460, &(0x7f0000001900))
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = accept(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000240)=0x8)
r8 = socket$kcm(0x2b, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x4, 0x2, 0x4, {0xa, 0x4e23, 0x3, @loopback, 0x2}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000840)}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x3}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e)
sendmmsg(r4, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)

19:18:36 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:36 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:36 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x1)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0))
semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000380)=""/253)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = msgget$private(0x0, 0x400)
msgrcv(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xef, 0x3, 0x1000)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x14)
fcntl$setown(r2, 0x8, 0x0)
execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)

[  503.158888][T13463] sg_write: data in/out 262577/277 bytes for SCSI command 0xa-- guessing data in;
[  503.158888][T13463]    program syz-executor.0 not setting count and/or reply_len properly
19:18:36 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  503.346564][   T27] audit: type=1804 audit(1583090316.585:307): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/192/bus" dev="sda1" ino=16519 res=1
19:18:36 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:36 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(0x0, 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  503.397758][T13487] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/4' not defined.
[  503.399296][   T27] audit: type=1804 audit(1583090316.615:308): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/192/bus" dev="sda1" ino=16519 res=1
19:18:36 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(0x0, 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:36 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:39 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:39 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(0x0, 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:39 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:39 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

19:18:39 executing program 4:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
close(0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x90)

19:18:39 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x1)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0))
semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000380)=""/253)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = msgget$private(0x0, 0x400)
msgrcv(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xef, 0x3, 0x1000)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x14)
fcntl$setown(r2, 0x8, 0x0)
execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)

19:18:39 executing program 2:
syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:39 executing program 2:
syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:39 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:39 executing program 2:
syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:39 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60120000a84302910000003900090023000c0002", 0x25}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x10000, 0x0)

19:18:39 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  508.892885][    T0] NOHZ: local_softirq_pending 08
19:18:42 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:42 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:42 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pwrite64(r0, &(0x7f0000000200)="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", 0x200, 0x0)

19:18:42 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8864}, @void, @ipx={0xffff, 0x1e, 0x0, 0x0, {@random, @broadcast}, {@current, @random="ac0061bb0400"}}}, 0x22)

19:18:42 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff})
dup3(r2, r0, 0x0)
shutdown(r1, 0x0)

19:18:42 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:42 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

19:18:42 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:42 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  509.332210][   T27] audit: type=1804 audit(1583090322.575:309): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/199/bus" dev="sda1" ino=17268 res=1
19:18:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r3 = accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000)
accept(r3, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
ptrace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x40490, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c1b20dedac00513af7193cb60f963b4de2259a3aea05293e29e727d2bef317203386280069350b82ab1216d3b0aa181185cd804967d8eb1a80ae34d037d9ad3023aace100102f97c7f82feb75b66e5cdc558cde6cff37eec6ba100af8af79af7e991fbe25fbff6d5134e68c6"])
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x280000000000002, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000fbd, &(0x7f0000001040)={0x2, 0x4e23, @local}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
mount$fuse(0x0, 0x0, &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="66647d8532b5adca72885e20265b56164fdac68de6fd46112acb9116c26d2f25557d6107c5e06bd06e9a7917897d75a28890c7a674b8796660c5bc046094ba6906e31b9ba599aaee1ad3fa78e18fafc4ef", @ANYRESDEC=r7, @ANYRES64=r6, @ANYRESDEC=0x0, @ANYBLOB="13ce410075705f69643dc2a407fea20d4d9718364a40f3703d9363c319fba8f13e297737c6d214d98a44e465b03ba5effbc94f2684cfb1d8a05ee8461e59a3efdaa8d4b1c91aefd6f02e9da38484cc5d4fc81fb18d142fc39697ef539d922facf0fe1d4c0a238dd32e517b043799758a34ed7da441e5da7eddf8cf10b38dd1059fc9ad0200461fe95f2699f008b1843973dd321d585b370af85ac4a74b41a0f7290e3c8f875f6d6020371b2e68491e65e6733e44b33c6d00"/197, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="cd5d20", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040003,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'])
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0)
r12 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_elf64(r12, &(0x7f0000000700)=ANY=[@ANYBLOB="91a88975762302a87f1abb7c51bd1fa120296ac78cf850e80098ab17a03c6114b3b0cdf80ba84627c939872a477b05a51698678ac589607a38b3a67fb3ad76448325081fc6aa42cf45b6cc06251647a77c7b535e8735f55f9d6dd980fed3ff5236eec8f5524c419bcdba56aa2ca6e801c03a52615831b1bec73747e778c1aae7ecb4fd53c6972466905b01deed56eb93244d3137602ba8ff8e99d193182a3afd2cf4e6dcc91446a0e069cfb9eab9fb18e3", @ANYRES32=r8], 0xb5)
fallocate(r12, 0x3, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0))
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
open$dir(0x0, 0x0, 0x0)

[  509.443879][   T27] audit: type=1804 audit(1583090322.595:310): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/199/bus" dev="sda1" ino=17268 res=1
19:18:42 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:45 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:45 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:45 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
geteuid()
mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1201014, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq'}}, {@sq={'sq', 0x3d, 0x8000}}, {@timeout={'timeout', 0x3d, 0xffffffff}}, {@rq={'rq', 0x3d, 0x9}}, {@timeout={'timeout'}}, {@timeout={'timeout', 0x3d, 0x671d}}, {@sq={'sq', 0x3d, 0x3000000000000000}}]}})
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

19:18:45 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @redirect={0x3, 0x0, 0x0, @multicast1, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0)

19:18:45 executing program 4:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0)
fcntl$setlease(r1, 0x400, 0x1)
semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000380)=""/253)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = msgget$private(0x0, 0x400)
msgrcv(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xef, 0x3, 0x1000)
msgrcv(r3, &(0x7f0000000240)={0x0, ""/157}, 0xa5, 0x0, 0x1800)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x14)
fcntl$setown(r1, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)

19:18:45 executing program 0:
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[], 0x0)
socket$inet(0x2, 0x3, 0x83)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x1f, 0x400000008d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
socket(0x0, 0x0, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x0, 0x0})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000000c0)={{0xd}, {0x4b, 0x4}, 0x4, 0x2, 0x1})
write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x144)
readv(r6, &(0x7f0000000280)=[{&(0x7f0000000140)=""/160, 0xfe78}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)

19:18:45 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  512.236018][   T27] audit: type=1804 audit(1583090325.475:311): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/200/bus" dev="sda1" ino=17306 res=1
19:18:45 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  512.314378][   T27] audit: type=1804 audit(1583090325.475:312): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/200/bus" dev="sda1" ino=17306 res=1
[  512.362781][T13665] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/5' not defined.
19:18:45 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}}, r1, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0))
msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)

19:18:45 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  512.459368][   T27] audit: type=1804 audit(1583090325.695:313): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/201/bus" dev="sda1" ino=17290 res=1
[  512.491522][T13681] sg_write: data in/out 262577/282 bytes for SCSI command 0xa-- guessing data in;
[  512.491522][T13681]    program syz-executor.0 not setting count and/or reply_len properly
19:18:45 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x0)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  512.539471][   T27] audit: type=1804 audit(1583090325.765:314): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/201/bus" dev="sda1" ino=17290 res=1
[  512.652919][   T27] audit: type=1804 audit(1583090325.895:315): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/202/bus" dev="sda1" ino=17309 res=1
[  512.692542][   T27] audit: type=1804 audit(1583090325.925:316): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/202/bus" dev="sda1" ino=17309 res=1
19:18:48 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:48 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:48 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x0)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x2}, @void, @ipx={0xffff, 0x1e, 0x0, 0x0, {@random, @broadcast}, {@current, @random="ac003761bb04"}}}, 0x22)

19:18:48 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)

19:18:48 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}}, r1, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0))
msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)

19:18:48 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  515.325727][   T27] audit: type=1804 audit(1583090328.565:317): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/203/bus" dev="sda1" ino=17318 res=1
19:18:48 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x0)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:48 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  515.440522][   T27] audit: type=1804 audit(1583090328.565:318): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/203/bus" dev="sda1" ino=17318 res=1
[  515.629837][   T27] audit: type=1804 audit(1583090328.865:319): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/204/bus" dev="sda1" ino=17323 res=1
19:18:48 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:48 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(0xffffffffffffffff)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:48 executing program 4:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}}, r1, 0x0, 0xffffffffffffffff, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0))
msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)

[  515.703197][   T27] audit: type=1804 audit(1583090328.865:320): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/204/bus" dev="sda1" ino=17323 res=1
[  515.864910][   T27] audit: type=1804 audit(1583090329.105:321): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/205/bus" dev="sda1" ino=17331 res=1
[  515.915583][   T27] audit: type=1804 audit(1583090329.155:322): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/205/bus" dev="sda1" ino=17331 res=1
19:18:51 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:51 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)

19:18:51 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000180)=0x8)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3})

19:18:51 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(0xffffffffffffffff)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:51 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
dup(r0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x8000000a, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
pipe(&(0x7f0000000000))
syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x0)
getdents(r3, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13)
sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
tkill(r1, 0x5)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200))
ptrace$cont(0x9, r1, 0x0, 0x0)

19:18:51 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:51 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  518.500347][   T27] audit: type=1804 audit(1583090331.735:323): pid=13772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/206/bus" dev="sda1" ino=17347 res=1
[  518.615715][   T27] audit: type=1804 audit(1583090331.855:324): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/206/bus" dev="sda1" ino=17347 res=1
19:18:51 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2)
write$tun(r0, &(0x7f0000000680)=ANY=[], 0x0)

19:18:51 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:52 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/128, 0x80}, {0x0}], 0x2, 0x0)

19:18:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"})
r3 = socket$inet(0x10, 0x2000004000000003, 0x0)
dup2(r3, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))

[  519.781126][    T0] NOHZ: local_softirq_pending 08
19:18:54 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:54 executing program 3:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pread64(r0, 0x0, 0x0, 0x0)

19:18:54 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2, 0x3, 0x498, 0x0, 0x300, 0x300, 0x300, 0x0, 0x400, 0x400, 0x400, 0x400, 0x400, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230, 'bpf\x00'}, {0x17}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8)

19:18:54 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:54 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(0xffffffffffffffff)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  521.441995][T13816] xt_bpf: check failed: parse error
19:18:54 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000040000000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

19:18:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)="53b2e7b6a1765a0d82a8f427ac11eb03ec223b5eaaea0b01594b5295d07792946fcd49ebbcdf0a7252b8831addf9b7d547fd", &(0x7f0000000240), 0x32})
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000300)={0x0, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {0x20, 0x81}})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  521.547939][   T27] audit: type=1804 audit(1583090334.785:325): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/207/bus" dev="sda1" ino=16817 res=1
19:18:54 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:54 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:55 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  521.707058][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  521.719866][   T27] audit: type=1804 audit(1583090334.845:326): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/207/bus" dev="sda1" ino=16817 res=1
19:18:55 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  521.870537][   T27] audit: type=1804 audit(1583090335.105:327): pid=13847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/208/bus" dev="sda1" ino=16930 res=1
19:18:57 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

19:18:57 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:57 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2932, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

19:18:57 executing program 3:

19:18:57 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:57 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:57 executing program 3:

19:18:57 executing program 2:
syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:57 executing program 0:

[  524.647529][   T27] audit: type=1804 audit(1583090337.885:328): pid=13869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/209/bus" dev="sda1" ino=17185 res=1
19:18:58 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  524.791412][T13885] 9pnet: Insufficient options for proto=fd
19:18:58 executing program 0:

19:18:58 executing program 3:

19:18:58 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

19:18:58 executing program 2:
syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:58 executing program 2:
syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  525.118913][   T27] audit: type=1804 audit(1583090338.355:329): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/210/bus" dev="sda1" ino=17201 res=1
19:18:58 executing program 0:

19:18:58 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  525.271279][T13908] 9pnet: Insufficient options for proto=fd
19:18:58 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:58 executing program 0:

19:18:58 executing program 3:

19:18:58 executing program 2:
syz_emit_ethernet(0xca, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x2}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:58 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

19:18:58 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  525.424129][   T27] audit: type=1804 audit(1583090338.665:330): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/211/bus" dev="sda1" ino=17169 res=1
19:18:58 executing program 2:
syz_emit_ethernet(0xca, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x2}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:58 executing program 3:

19:18:58 executing program 0:

[  525.681097][   T27] audit: type=1804 audit(1583090338.915:331): pid=13927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/212/bus" dev="sda1" ino=17121 res=1
19:18:59 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:59 executing program 2:
syz_emit_ethernet(0xca, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x2}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  525.802510][T13933] 9pnet: Insufficient options for proto=fd
19:18:59 executing program 3:

[  525.974861][   T27] audit: type=1804 audit(1583090339.215:332): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/213/bus" dev="sda1" ino=17217 res=1
19:18:59 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:18:59 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:18:59 executing program 0:

19:18:59 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:18:59 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0xa, "592f82a73652e185"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:59 executing program 3:

19:18:59 executing program 0:

19:18:59 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  526.288134][   T27] audit: type=1804 audit(1583090339.525:333): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/214/bus" dev="sda1" ino=17359 res=1
19:18:59 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0xa, "592f82a73652e185"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:59 executing program 3:

[  526.541556][   T27] audit: type=1804 audit(1583090339.785:334): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/215/bus" dev="sda1" ino=17057 res=1
19:18:59 executing program 0:

19:18:59 executing program 2:
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0xa, "592f82a73652e185"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:18:59 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:00 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:19:00 executing program 3:

19:19:00 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:00 executing program 0:

19:19:00 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0xe, "592f82a73652e185e574f16b"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:00 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:00 executing program 3:

19:19:00 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0xe, "592f82a73652e185e574f16b"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:00 executing program 0:

[  527.165971][   T27] audit: type=1804 audit(1583090340.405:335): pid=14007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/216/bus" dev="sda1" ino=17363 res=1
19:19:00 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:00 executing program 3:

[  527.279245][   T27] audit: type=1804 audit(1583090340.475:336): pid=14007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/216/bus" dev="sda1" ino=17363 res=1
[  527.439379][T14006] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
19:19:00 executing program 0:

[  527.544092][   T27] audit: type=1804 audit(1583090340.785:337): pid=14030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/217/bus" dev="sda1" ino=16802 res=1
19:19:01 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:19:01 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0xe, "592f82a73652e185e574f16b"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:01 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:01 executing program 3:

19:19:01 executing program 0:

19:19:01 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:01 executing program 3:

19:19:01 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x10, "592f82a73652e185e574f16b1684"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  528.092400][   T27] audit: type=1804 audit(1583090341.335:338): pid=14047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/218/bus" dev="sda1" ino=17381 res=1
19:19:01 executing program 0:

19:19:01 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:01 executing program 3:

[  528.329839][T14049] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
19:19:01 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x10, "592f82a73652e185e574f16b1684"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  528.461109][   T27] audit: type=1804 audit(1583090341.695:339): pid=14070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/219/bus" dev="sda1" ino=16578 res=1
19:19:02 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:19:02 executing program 3:

19:19:02 executing program 0:

19:19:02 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x10, "592f82a73652e185e574f16b1684"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:02 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:02 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:02 executing program 0:

19:19:02 executing program 3:
socket(0x0, 0x800000003, 0x8)
bind(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

19:19:02 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x11, "592f82a73652e185e574f16b168410"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:02 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:02 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:02 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x11, "592f82a73652e185e574f16b168410"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:05 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:19:05 executing program 0:

19:19:05 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:05 executing program 3:

19:19:05 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x11, "592f82a73652e185e574f16b168410"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:05 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:05 executing program 0:

19:19:05 executing program 3:

19:19:05 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:05 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:05 executing program 3:

19:19:05 executing program 3:

[  532.435995][   T27] audit: type=1804 audit(1583090345.675:340): pid=14159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/223/bus" dev="sda1" ino=17401 res=1
19:19:06 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:19:06 executing program 0:

19:19:06 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:06 executing program 3:

19:19:06 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:06 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:06 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:06 executing program 3:

[  533.042807][   T27] audit: type=1804 audit(1583090346.285:341): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/224/bus" dev="sda1" ino=17426 res=1
19:19:06 executing program 0:

19:19:06 executing program 3:

19:19:06 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:06 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x2}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  533.455824][   T27] audit: type=1804 audit(1583090346.695:342): pid=14199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/225/bus" dev="sda1" ino=17423 res=1
19:19:07 executing program 1:
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

19:19:07 executing program 0:

19:19:07 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:07 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x2}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:07 executing program 3:

19:19:07 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:07 executing program 0:

19:19:07 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x2}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:07 executing program 3:

[  534.088487][   T27] audit: type=1804 audit(1583090347.325:343): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/226/bus" dev="sda1" ino=17441 res=1
19:19:07 executing program 3:

[  534.169055][T14230] 9pnet: Insufficient options for proto=fd
19:19:07 executing program 0:

19:19:07 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  534.466374][   T27] audit: type=1804 audit(1583090347.705:344): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/227/bus" dev="sda1" ino=17426 res=1
19:19:10 executing program 1:
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

19:19:10 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x3, '^'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:10 executing program 3:

19:19:10 executing program 0:

19:19:10 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:10 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:10 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x3, '^'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:10 executing program 3:

19:19:10 executing program 0:

[  537.100144][   T27] audit: type=1804 audit(1583090350.335:345): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/228/bus" dev="sda1" ino=17460 res=1
19:19:10 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:10 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@rand_addr, @broadcast, @remote, @broadcast]}, @generic={0x0, 0x3, '^'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  537.245834][T14268] 9pnet: Insufficient options for proto=fd
19:19:10 executing program 3:

[  537.534040][   T27] audit: type=1804 audit(1583090350.775:346): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/229/bus" dev="sda1" ino=17454 res=1
[  537.626104][   T27] audit: type=1804 audit(1583090350.855:347): pid=14281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/229/bus" dev="sda1" ino=17454 res=1
19:19:13 executing program 1:
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

19:19:13 executing program 0:

19:19:13 executing program 2:
syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:13 executing program 3:

19:19:13 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:13 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:13 executing program 2:
syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:13 executing program 3:

[  540.173656][   T27] audit: type=1804 audit(1583090353.415:348): pid=14291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/230/bus" dev="sda1" ino=17474 res=1
19:19:13 executing program 0:

19:19:13 executing program 2:
syz_emit_ethernet(0xc6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:13 executing program 3:

[  540.301079][   T27] audit: type=1804 audit(1583090353.485:349): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/230/bus" dev="sda1" ino=17474 res=1
[  540.323330][T14304] 9pnet: Insufficient options for proto=fd
19:19:13 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @remote]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:16 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @remote]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:16 executing program 3:

19:19:16 executing program 0:

19:19:16 executing program 1:
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

19:19:16 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:16 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:16 executing program 0:

19:19:16 executing program 3:

[  543.364729][   T27] audit: type=1804 audit(1583090356.605:350): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/231/bus" dev="sda1" ino=17489 res=1
19:19:16 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:16 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @remote]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  543.418401][T14340] 9pnet: Insufficient options for proto=fd
[  543.450248][   T27] audit: type=1804 audit(1583090356.685:351): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/231/bus" dev="sda1" ino=17489 res=1
19:19:16 executing program 3:

19:19:16 executing program 0:

19:19:16 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:16 executing program 3:

19:19:17 executing program 0:

19:19:19 executing program 1:
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

19:19:19 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:19 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
write$tun(r0, &(0x7f0000000040)={@void, @val={0x3}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @broadcast, @empty}, "919dba2202000000000000000a000300"}}}, 0x2e)

19:19:19 executing program 0:
r0 = inotify_init()
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@empty, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty}, 0x0, @in=@loopback}}, 0xe4)
dup2(r3, r4)

19:19:19 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:19 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  546.406488][   T27] audit: type=1804 audit(1583090359.645:352): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/232/bus" dev="sda1" ino=17508 res=1
19:19:19 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @broadcast, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  546.453507][T14374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  546.471921][T14380] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  546.516463][T14387] 9pnet: Insufficient options for proto=fd
[  546.598006][   T27] audit: type=1804 audit(1583090359.835:353): pid=14383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/232/bus" dev="sda1" ino=17508 res=1
19:19:19 executing program 0:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)='\f', 0x1, 0x2404c064, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0)

[  546.640820][T14374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
19:19:20 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:20 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  546.812454][T14374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
19:19:20 executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000600)={0x0, 0x8d}, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
vmsplice(r1, &(0x7f0000000180), 0x1000000000000093, 0x0)

19:19:20 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  546.995372][   T27] audit: type=1804 audit(1583090360.235:354): pid=14401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/233/bus" dev="sda1" ino=17492 res=1
[  547.090366][   T27] audit: type=1804 audit(1583090360.315:355): pid=14404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/233/bus" dev="sda1" ino=17492 res=1
[  547.190089][T14374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  547.261406][T14374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
19:19:22 executing program 1:
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

19:19:22 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:22 executing program 0:

19:19:22 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:22 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:22 executing program 3:

19:19:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x6}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, 0x0)
creat(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x1}}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0xee)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, @phonet={0x23, 0x3, 0xff, 0x1}, @xdp={0x2c, 0x0, 0x0, 0x2c}, @can={0x1d, r3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1}}, 0x40080)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0004290000000600060004"], 0x2}}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000000)={0x0, 0x3}, 0x4)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x440c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)
getpid()
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = fcntl$dupfd(r4, 0x0, r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)

[  549.460772][   T27] audit: type=1804 audit(1583090362.695:356): pid=14422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/234/bus" dev="sda1" ino=17525 res=1
19:19:22 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@rand_addr, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000e00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000))

[  549.546714][   T27] audit: type=1804 audit(1583090362.785:357): pid=14429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/234/bus" dev="sda1" ino=17525 res=1
19:19:22 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

[  549.687436][T14442] 9pnet: Insufficient options for proto=fd
19:19:23 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)
getpid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)

19:19:23 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
write$tun(r0, &(0x7f0000000040)={@void, @val={0x3}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @broadcast, @empty}, "919dba2200000000000000002e000300"}}}, 0x2e)

[  549.938887][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  549.946799][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  549.985734][T14456] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  550.095515][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.155557][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.184933][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  550.207496][T14455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  550.549839][T14455] batman_adv: batadv0: Interface activated: bridge1
[  550.689207][T14456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  550.704790][T14456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.712990][T14456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  552.412055][    T0] NOHZ: local_softirq_pending 08
19:19:25 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:25 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:19:25 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:19:25 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x29021)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}], 0xfdda)

19:19:25 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

19:19:25 executing program 0:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000008000/0x2000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)

19:19:25 executing program 2:
syz_emit_ethernet(0xd6, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x3, @local}, @source_quench={0xb, 0x0, 0x0, 0x2c00, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @remote, @broadcast]}, @generic={0x0, 0x4, '^:'}, @generic={0x0, 0x12, "592f82a73652e185e574f16b168410ab"}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@broadcast}, {@remote}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@local}, {@broadcast}, {@local}, {@dev}, {@dev}]}]}}}}}}}, 0x0)

19:19:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)

[  552.648407][   T27] audit: type=1804 audit(1583090365.885:358): pid=14481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/235/bus" dev="sda1" ino=16659 res=1
[  552.730424][   T27] audit: type=1804 audit(1583090365.965:359): pid=14492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/235/bus" dev="sda1" ino=16659 res=1
19:19:26 executing program 2:
r0 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00002ef000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0)

19:19:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x3604, 0x0)

19:19:26 executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204002b02000270fff8", 0x16}], 0x0, 0x0)

19:19:26 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

19:19:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f00000001c0)=""/76, 0x4c)
getdents(r1, 0x0, 0x28000000)

[  553.039641][T14511] FAT-fs (loop0): Directory bread(block 11008) failed
[  553.055922][T14511] FAT-fs (loop0): Directory bread(block 11009) failed
[  553.065467][T14511] FAT-fs (loop0): Directory bread(block 11010) failed
[  553.072490][T14511] FAT-fs (loop0): Directory bread(block 11011) failed
[  553.079445][T14511] FAT-fs (loop0): Directory bread(block 11012) failed
[  553.088745][T14511] FAT-fs (loop0): Directory bread(block 11013) failed
[  553.096072][T14511] FAT-fs (loop0): Directory bread(block 11014) failed
[  553.103183][T14511] FAT-fs (loop0): Directory bread(block 11015) failed
[  553.110118][T14511] FAT-fs (loop0): Directory bread(block 11016) failed
[  553.117195][T14511] FAT-fs (loop0): Directory bread(block 11017) failed
19:19:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
syz_open_dev$usbfs(0x0, 0x0, 0x0)
r0 = getpid()
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)={0x1a, 0x7, 0x0, {{0xd, '/selinux/mls\x00'}}}, 0x1a)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400), 0x10)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x0)
syz_open_procfs(r0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0))
fchdir(r4)
r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r5, 0x800)
lseek(r5, 0x1f, 0x2)
r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8400fffffffa)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[  553.179810][   T27] audit: type=1804 audit(1583090366.415:360): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir843751979/syzkaller.oJN0vF/269/file0" dev="sda1" ino=16961 res=1
19:19:26 executing program 1:
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  553.386157][   T27] audit: type=1804 audit(1583090366.625:361): pid=14537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir843751979/syzkaller.oJN0vF/270/bus" dev="sda1" ino=16610 res=1
[  553.498857][   T27] audit: type=1804 audit(1583090366.695:362): pid=14539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir843751979/syzkaller.oJN0vF/270/bus" dev="sda1" ino=16610 res=1
19:19:26 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

19:19:26 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657)

19:19:26 executing program 5:
perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x2007fff)
r2 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[  553.929775][   T27] audit: type=1804 audit(1583090367.165:363): pid=14553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/236/bus" dev="sda1" ino=17105 res=1
[  554.004895][   T27] audit: type=1804 audit(1583090367.245:364): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir285485363/syzkaller.aUdNUH/236/bus" dev="sda1" ino=17105 res=1
[  554.183160][T14537] ==================================================================
[  554.191286][T14537] BUG: KCSAN: data-race in wbc_detach_inode / wbc_detach_inode
[  554.198824][T14537] 
[  554.201171][T14537] write to 0xffff8880a9ecf664 of 2 bytes by task 14531 on cpu 0:
[  554.208894][T14537]  wbc_detach_inode+0x277/0x540
[  554.213756][T14537]  __filemap_fdatawrite_range+0x1c6/0x220
[  554.219478][T14537]  filemap_flush+0x2a/0x40
[  554.223893][T14537]  ext4_alloc_da_blocks+0x72/0x170
[  554.229001][T14537]  ext4_release_file+0x107/0x200
[  554.233936][T14537]  __fput+0x1c3/0x4f0
[  554.237918][T14537]  ____fput+0x1b/0x30
[  554.241899][T14537]  task_work_run+0xf5/0x130
[  554.246409][T14537]  exit_to_usermode_loop+0x2ae/0x2c0
[  554.251703][T14537]  do_syscall_64+0x36e/0x390
[  554.256288][T14537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  554.262160][T14537] 
[  554.264491][T14537] read to 0xffff8880a9ecf664 of 2 bytes by task 14537 on cpu 1:
[  554.272115][T14537]  wbc_detach_inode+0x93/0x540
[  554.276878][T14537]  __filemap_fdatawrite_range+0x1c6/0x220
19:19:27 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  554.282594][T14537]  filemap_flush+0x2a/0x40
[  554.287006][T14537]  ext4_alloc_da_blocks+0x72/0x170
[  554.292119][T14537]  ext4_release_file+0x107/0x200
[  554.297055][T14537]  __fput+0x1c3/0x4f0
[  554.301029][T14537]  ____fput+0x1b/0x30
[  554.305006][T14537]  task_work_run+0xf5/0x130
[  554.309510][T14537]  get_signal+0x1236/0x1290
[  554.314016][T14537]  do_signal+0x2b/0x670
[  554.318177][T14537]  exit_to_usermode_loop+0x24a/0x2c0
[  554.323466][T14537]  do_syscall_64+0x36e/0x390
[  554.328059][T14537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  554.333938][T14537] 
[  554.336260][T14537] Reported by Kernel Concurrency Sanitizer on:
[  554.342414][T14537] CPU: 1 PID: 14537 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[  554.351075][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  554.361121][T14537] ==================================================================
[  554.369174][T14537] Kernel panic - not syncing: panic_on_warn set ...
[  554.375752][T14537] CPU: 1 PID: 14537 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[  554.384413][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  554.394471][T14537] Call Trace:
[  554.397772][T14537]  dump_stack+0x11d/0x187
[  554.402139][T14537]  panic+0x210/0x640
[  554.406051][T14537]  ? vprintk_func+0x89/0x13a
[  554.410654][T14537]  kcsan_report.cold+0xc/0x14
[  554.415325][T14537]  kcsan_setup_watchpoint+0x304/0x400
[  554.420678][T14537]  wbc_detach_inode+0x93/0x540
[  554.425427][T14537]  ? do_writepages+0x140/0x170
[  554.430177][T14537]  ? _raw_spin_unlock+0x38/0x60
[  554.435143][T14537]  __filemap_fdatawrite_range+0x1c6/0x220
[  554.440863][T14537]  filemap_flush+0x2a/0x40
[  554.445257][T14537]  ext4_alloc_da_blocks+0x72/0x170
[  554.450390][T14537]  ext4_release_file+0x107/0x200
[  554.455333][T14537]  ? ext4_file_read_iter+0x360/0x360
[  554.460713][T14537]  __fput+0x1c3/0x4f0
[  554.464690][T14537]  ____fput+0x1b/0x30
[  554.468664][T14537]  task_work_run+0xf5/0x130
[  554.473156][T14537]  get_signal+0x1236/0x1290
[  554.477642][T14537]  ? __read_once_size.constprop.0+0xd/0x20
[  554.483426][T14537]  ? task_work_add+0x91/0x100
[  554.488090][T14537]  do_signal+0x2b/0x670
[  554.492239][T14537]  ? do_sendfile+0x1d4/0x810
[  554.496820][T14537]  exit_to_usermode_loop+0x24a/0x2c0
[  554.502087][T14537]  ? __x64_sys_sendfile64+0xea/0x140
[  554.507364][T14537]  do_syscall_64+0x36e/0x390
[  554.511944][T14537]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  554.517818][T14537] RIP: 0033:0x45c479
[  554.521694][T14537] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  554.541286][T14537] RSP: 002b:00007f3589a20c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  554.549734][T14537] RAX: 00000000011ac74f RBX: 00007f3589a216d4 RCX: 000000000045c479
[  554.557697][T14537] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[  554.565651][T14537] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[  554.573601][T14537] R10: 00008400fffffffa R11: 0000000000000246 R12: 00000000ffffffff
[  554.581581][T14537] R13: 00000000000008d1 R14: 00000000004cb364 R15: 000000000076c06c
[  554.591064][T14537] Kernel Offset: disabled
[  554.595394][T14537] Rebooting in 86400 seconds..