ntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='4', 0x4100) 00:24:51 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) getgroups(0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/135) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080060f089f04c0b58c72881625e73958c5d102c031fb4416e21dc175d88f2c52eaac01eea0c3684b35431a399ff7fbcfee39e46f468f77c9d284aa21cd5df3ad1b5", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYBLOB="6bc2c3d3a24d76ef32592a4876dc54cfc6404200355703f97b87789a66042ef7f78f0a9525595eafbf569a54dc51a04915a3d2fa403cc6c2741b366cf8c7820259e94655329f3ef13448c8f64639e24a2e6c6db9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x7, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) getsockname$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40000, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x10) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000300)={{0x2, @addr=0x656}, 0x8, 0x7ff, 0x3}) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 00:24:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 352.349406] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:52 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='4', 0x4100) 00:24:52 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0x0, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:52 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:52 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) getgroups(0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/135) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080060f089f04c0b58c72881625e73958c5d102c031fb4416e21dc175d88f2c52eaac01eea0c3684b35431a399ff7fbcfee39e46f468f77c9d284aa21cd5df3ad1b5", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYBLOB="6bc2c3d3a24d76ef32592a4876dc54cfc6404200355703f97b87789a66042ef7f78f0a9525595eafbf569a54dc51a04915a3d2fa403cc6c2741b366cf8c7820259e94655329f3ef13448c8f64639e24a2e6c6db9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x7, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) getsockname$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40000, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x10) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000300)={{0x2, @addr=0x656}, 0x8, 0x7ff, 0x3}) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 00:24:52 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0x0, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 352.873157] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:52 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = dup3(r2, r1, 0x474daa0b77d6327b) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000080)=0x5, 0x4) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:24:52 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='4', 0x4100) 00:24:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:52 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:52 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x0, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x6, 0x200500) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) r2 = socket(0x10, 0x803, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0xffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind$can_raw(r5, &(0x7f0000000300)={0x1d, r6}, 0x10) fcntl$getown(r3, 0x9) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000005ac0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r8) sendmsg$nl_route_sched(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000540)=@deltfilter={0x6cc, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xd}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x69c, 0x2, [@TCA_BASIC_ACT={0x68, 0x3, @m_bpf={0x64, 0x20, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x40, 0x0, 0xffffffff}, {0x1f, 0x3, 0x80, 0x81}, {0x3, 0x7f, 0x56, 0x7c47}, {0x97f, 0x40, 0x81, 0x400}]}]}, {0x2c, 0x6, "e54fa35c9f6345302ae55710963fbb420f43302aa3c6b84a1cdaad95e8d90c568ee6033452"}}}}, @TCA_BASIC_EMATCHES={0x2c, 0x2, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd693}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x1000, {0x0, 0x8, 0x4ac, 0x0, {0x7e2c, 0x80, 0x5}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_EMATCHES={0xfc, 0x2, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x9, {0x2cd8, 0x8, 0x8, 0x0, {0xff, 0xce}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_NBYTE={0x1c, 0x8, {0xfffa, 0x2, 0xfff8, 0x0, {0x81, 0x2, 0x0, "f76e"}}}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, @TCF_EM_IPT={0x2c, 0x2, {0x4, 0x9, 0x9, 0x0, [@TCA_EM_IPT_NFPROTO={0x8, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_REVISION={0x8}]}}}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, @TCF_EM_META={0x84, 0x8001, {0x2, 0x4, 0x0, 0x0, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f4842599dc6d44e6e292", @TCF_META_TYPE_VAR="6110646299fc"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="52080343080f95962d21"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="169ab79405d09a5c4d56"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8b48e5", @TCF_META_TYPE_VAR="e51db232414a43bd", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='V', @TCF_META_TYPE_VAR="be84"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="91fe4602261e", @TCF_META_TYPE_VAR="1a0c", @TCF_META_TYPE_VAR='d', @TCF_META_TYPE_VAR="0fce20894a"]}]}}}]}, @TCA_BASIC_EMATCHES={0xa4, 0x2, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x2, {0x1, 0x1, 0x9, 0x0, {0x8, 0x7fff, 0x9, 0x2, 0x1, 0x3}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf881}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x8, {0x0, 0x3, 0x0, 0x0, {0xfed, 0x705a6b5e, 0x9, 0x2e6f}}}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x101, {0x2, 0x3, 0xb908, 0x0, {0x6, 0x2, 0x3}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_POLICE={0x408, 0x4, @TCA_POLICE_RATE={0x404, 0x2, [0x4fa3b3b, 0x7, 0x800, 0x6, 0x5, 0x9c1c342, 0x0, 0x9, 0x9, 0x8001, 0x2, 0x1, 0x0, 0x4, 0x6, 0x7aaf, 0x10001, 0x5, 0x9, 0x5, 0x1000, 0xfff, 0x4, 0x9, 0x2, 0xb, 0x1, 0x101, 0x100, 0x8, 0x10000, 0x1f, 0x401, 0x80000001, 0xe0000000, 0x8001, 0x3, 0x6, 0x5c, 0x7, 0x800, 0x3, 0x1, 0x0, 0x2, 0xaf18, 0x2, 0x5, 0x1, 0x6, 0xfffffff9, 0xeb25, 0x12, 0x8, 0x6, 0xc84, 0x4, 0x6, 0x7fffffff, 0x4, 0x9, 0x80000001, 0x2, 0xb640, 0x9, 0x4, 0x22, 0x2, 0x2, 0x2, 0x7, 0x9, 0xfff, 0x0, 0x2, 0x800, 0xfffffff8, 0x7, 0x80000001, 0x562, 0x1, 0x8, 0x401, 0x10001, 0x1, 0xbc88, 0x20, 0x3ff, 0x5, 0x80, 0x7, 0x4, 0x3931db90, 0xfff, 0x9e, 0x1ff, 0xfabe, 0x81, 0x1, 0x401, 0x9, 0xfff, 0x60, 0x2, 0x1, 0xe5b, 0x7, 0x8, 0x6, 0xa8, 0x80, 0x0, 0x9, 0x1, 0x7, 0xbdb9, 0x3, 0x8, 0x10000, 0x4, 0x60a8, 0x401, 0x2, 0x10000, 0x5, 0x9, 0x0, 0x2, 0x10000, 0x9, 0x800, 0x7, 0x8, 0x50000, 0xffff, 0x1, 0x2, 0xffffffff, 0xfff, 0xfffffff9, 0x800, 0x6, 0x1, 0xfffffc00, 0x7ea9d6ea, 0x1078, 0x2, 0x9, 0x0, 0x40, 0xffff39cc, 0x9c0, 0x7, 0x6, 0x46, 0xff, 0xffffa6b5, 0x9, 0x0, 0x15c, 0x1, 0x3, 0x5, 0x2, 0x8001, 0x4, 0x800, 0x7, 0x8, 0x81b, 0x401, 0x1, 0xff, 0x8000, 0xff, 0xa34e, 0x4, 0xfffffff7, 0x99, 0x400, 0x1, 0x0, 0x94, 0x0, 0xb59, 0xfffffffc, 0x7, 0x3, 0x3, 0x6, 0x0, 0x0, 0x9, 0x716e, 0x4, 0xffffffff, 0x9ac, 0x5, 0xfffff235, 0x90, 0x6, 0x6, 0x1000, 0x3, 0x8, 0xff, 0x1f, 0x3ff, 0x4, 0x9, 0xffffffff, 0x4, 0x0, 0x2, 0x295d, 0x0, 0x7, 0x7ff, 0x20, 0x1000, 0x9, 0x1, 0x7f, 0x1, 0x4, 0x10000, 0x5, 0x8, 0xffffbba0, 0x401, 0x81, 0x2, 0x4, 0x5, 0x8, 0x9, 0x0, 0x2, 0x7d118ec7, 0x8, 0x1, 0x10001, 0x81, 0x8a9, 0x101, 0x401, 0x7, 0x3, 0x5, 0x1, 0xffffffe0, 0x3, 0x3, 0x7fffffff, 0x8000, 0xffffffdf]}}, @TCA_BASIC_EMATCHES={0x14, 0x2, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x19dd}}]}, @TCA_BASIC_POLICE={0x40, 0x4, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x60e7, 0x3, 0x7f, {0x1, 0x3e8a1678ac898447, 0x800, 0x4, 0x2b, 0x25c8}, {0x89, 0x1, 0x66, 0x7, 0x4, 0x8}, 0xff, 0x9, 0x1}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3ad4bd8318b49f62, 0x4}}]}}]}, 0x6cc}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000050000000f10691386905cfbba9cc7d0c8849dde6dbf2ca33f8790b754a22065e808356ec57f82115f958eb7fcddc03a38b15347dc64e720e2a58e025aa4eb80a9344d8e40929ab5f54e30393bf2a557e745a7af0cd4323c655c8e7a5da8ec1c7"], &(0x7f0000000100)=0x74) 00:24:52 executing program 0: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c9, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r3) setsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000080)="09e5f7431c764cd10e96429a0438a249095d790db309e828418f9e77092b3ab864ce9f107ddafea57ffdd6842afd63701d9ce8b4a1", 0x35) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x5, 0x1, 0x114, &(0x7f0000ffe000/0x1000)=nil, 0x8}) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 00:24:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:53 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) 00:24:53 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:53 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x0, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:53 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) rt_sigsuspend(&(0x7f0000000000)={0xcaa}, 0x8) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:24:53 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x0, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:53 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x0, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:53 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:53 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) 00:24:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:53 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x0, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:54 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) 00:24:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c9, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000180)={0x8, 0x630, 0xfff}) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000380)={0x3c, "20d1c8497644e846b86bd25f7e6b12bc937ed724995ca542ac873748f23b740a1aaf7566ee3722dc2010b53ee4b26cc61efc291edfae22db33ff79aeadf37f2d98058b1ef272477d0adb3c8102b24c0c20e5eef6efec40d75fcbc64adf1ab2ed062b2309606be6e732af1a1841e06d05e996e866d5096519db6bdf46e1135a92"}) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r10 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x427, 0x880) accept4$nfc_llcp(r10, &(0x7f00000002c0), &(0x7f0000000440)=0x60, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:24:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x5) ftruncate(r1, 0x1000000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c9, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000080)={0x10}) socket$inet_udplite(0x2, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x900, 0x0) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040), 0x1) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 00:24:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:54 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:54 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x0, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:54 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) [ 354.953458] nla_parse: 6 callbacks suppressed [ 354.953463] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:54 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:54 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x0, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:54 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) 00:24:55 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:55 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x0, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:55 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 355.662933] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:55 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) 00:24:55 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 355.821507] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:24:55 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 355.920702] net_ratelimit: 20 callbacks suppressed [ 355.920723] protocol 88fb is buggy, dev hsr_slave_0 [ 355.931041] protocol 88fb is buggy, dev hsr_slave_1 00:24:55 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:55 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:55 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r11, &(0x7f0000000600)='4', 0x4100) [ 356.186450] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:55 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 356.240127] protocol 88fb is buggy, dev hsr_slave_0 [ 356.245237] protocol 88fb is buggy, dev hsr_slave_1 00:24:56 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 356.410948] protocol 88fb is buggy, dev hsr_slave_0 [ 356.416716] protocol 88fb is buggy, dev hsr_slave_1 00:24:56 executing program 0: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944", 0x1ef) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c9, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @ipv4={[], [], @dev}}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x7, 0x1, "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", 0xf8, 0x4a, 0x0, 0x1f, 0x5, 0x1f, 0xff}, r7}}, 0x120) sendfile(r2, r3, 0x0, 0x7fffffa7) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, 0xffffffffffffffff, 0x0) [ 356.528158] audit: type=1800 audit(1569630296.093:88): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=13 res=0 [ 356.578557] audit: type=1804 audit(1569630296.123:89): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir216709590/syzkaller.DVCxCd/111/file0/file0" dev="loop0" ino=13 res=1 [ 356.657253] audit: type=1800 audit(1569630296.133:90): pid=20174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16929 res=0 00:24:56 executing program 0: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944", 0x1ef) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c9, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @ipv4={[], [], @dev}}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x7, 0x1, "16b874a474fbf6e35cd9c9012afa4036b277081f273145db1cd2f11c8e936c1d47e030839b6cb1bc9d45e09338d3ffeb21734099f00420f20fdf61a90ffafb6b54966d998f6b368d11db624ee2d05d0f59055985ebe5cf634f401dbaf201c36a2f03538a8417c16f9deba2dd3146d399c45b1ced3c92d2c2ca584af1bce0c1f96a30b62cbe15df739f9987e96f545c1a9b32d6ec289a9add29fb769b8ac9e33336842a623ef9eb93075853ab2cabd6632b2145c6d1433b7612063a5a740d8fc8b86cb7eed917faa0b030179988453b61d528b899f4bbea16cdc1119ab1ca4ed798be0923b4ae934fe54546d4f062a94971c0837ff5068026a66dcc9fdd2da0de", 0xf8, 0x4a, 0x0, 0x1f, 0x5, 0x1f, 0xff}, r7}}, 0x120) sendfile(r2, r3, 0x0, 0x7fffffa7) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, 0xffffffffffffffff, 0x0) [ 356.681395] audit: type=1804 audit(1569630296.223:91): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir216709590/syzkaller.DVCxCd/111/file0/file0" dev="loop0" ino=13 res=1 [ 356.721060] audit: type=1804 audit(1569630296.283:92): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir216709590/syzkaller.DVCxCd/111/file0/file0" dev="loop0" ino=13 res=1 00:24:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:56 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r11, &(0x7f0000000600)='4', 0x4100) 00:24:56 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 356.880113] protocol 88fb is buggy, dev hsr_slave_0 [ 356.885218] protocol 88fb is buggy, dev hsr_slave_1 [ 356.917095] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:56 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 356.971764] audit: type=1800 audit(1569630296.543:93): pid=20201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16929 res=0 [ 357.016351] audit: type=1804 audit(1569630296.573:94): pid=20195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir216709590/syzkaller.DVCxCd/112/file0/file0" dev="sda1" ino=16929 res=1 00:24:56 executing program 0: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944", 0x1ef) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c9, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @ipv4={[], [], @dev}}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x7, 0x1, "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", 0xf8, 0x4a, 0x0, 0x1f, 0x5, 0x1f, 0xff}, r7}}, 0x120) sendfile(r2, r3, 0x0, 0x7fffffa7) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x0, 0x8012, 0xffffffffffffffff, 0x0) [ 357.079800] audit: type=1804 audit(1569630296.643:95): pid=20195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir216709590/syzkaller.DVCxCd/112/file0/file0" dev="sda1" ino=16929 res=1 [ 357.172791] audit: type=1800 audit(1569630296.743:96): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16547 res=0 [ 357.327202] audit: type=1800 audit(1569630296.893:97): pid=20215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=14 res=0 00:24:57 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c9, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e23, @loopback}}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="aab7ce4bfc134c465b1eeace561a8a41dd02868fa40e3607bbc29bc4294f0c2db61091e227de985ae7c2fb8ce27d2526dbbd41e43280f37ed85e8bc4735c4c2be20bd84e561eb0025cb068ad85266d56f8119a6a61997824258171974bab2e900c5e87b9d99416902d0aac8429e72823a56f2eaa99e2279647b2c80ea3a5f0a2ac91d90c03e429830c6871d2cd4076be7ce7ee5038359e0168de5b5d47f3") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x401000000801, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40000) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096}) close(r3) r4 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0xf0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="d7aa372ef2e637c50993f2", 0xb, 0x40000, &(0x7f0000000200)=@abs, 0x6e) ftruncate(r6, 0x2007fff) sendfile(r3, r6, 0x0, 0x8000fffffffe) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) [ 357.440109] protocol 88fb is buggy, dev hsr_slave_0 [ 357.445292] protocol 88fb is buggy, dev hsr_slave_1 [ 357.453874] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:57 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:57 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7ea1bfb1}, &(0x7f0000000080)=0x8) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r11, &(0x7f0000000600)='4', 0x4100) 00:24:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:57 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:57 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 357.762716] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.788100] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:57 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x0, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:57 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r11, &(0x7f0000000600)='4', 0x4100) 00:24:57 executing program 3: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') [ 358.032516] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:57 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@can_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {}, [@CGW_CS_XOR={0xfffffffffffffef2, 0x5, {0x1, 0xffffffffffffffff, 0xfffffffffffffff8, 0x7f}}]}, 0x1c}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) unshare(0x40040400) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x100000000, 0x7, 0x12000}}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa5c, 0x0, 0x0, 0x0, 0x1f6, 0xfff, 0x7, 0x5, 0x0, 0x5, 0x2, 0x0, 0x5, 0x8, 0x0, 0x400, 0x0, 0x2, 0x2, 0x9, 0x400, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x9}, 0x280, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0x0, 0x80000) fanotify_mark(r5, 0x0, 0x0, r4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) write$P9_RREAD(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x153) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, r6, 0x9f5, 0x67, &(0x7f0000000040)="afadd26e7504c5f39e22000b0b9b81136075d19d7e724c84e17330c2b77f599eaa454d42859a1b4ae09d7840cc7d1abca1fb636017f91eca69b09982011b18b41ab97877596225a1c1143898b8b5175ccf09dd7b3854112c49ecc0548ee15a0d70237e14b6dc7f", 0x9439, 0x400, 0x6, 0x8, 0x0, 0x0, 0x80000000, 'syz1\x00'}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x65}}) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) [ 358.121415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:57 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:24:57 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) close(r3) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r11, &(0x7f0000000600)='4', 0x4100) 00:24:57 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x0, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x881) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)) gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = syz_open_procfs(r4, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000280)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) syz_open_dev$loop(0x0, 0x0, 0x182) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000000)='*!md5sum\x00', 0x0) seccomp(0x1, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="084dfe8c7db5b7fef5597fe9360d34cba7f0f1fbf807", 0x16, 0x10001}], 0x0, &(0x7f00000002c0)='*!md5sum\x00') ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x81805) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x501ac0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={[], [], @multicast2}}, &(0x7f0000000600)=0x14) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r11) ioctl$SIOCRSACCEPT(r11, 0x89e3) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000300)) time(0x0) [ 358.332054] IPVS: ftp: loaded support on port[0] = 21 00:24:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:58 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x0, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:58 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) r6 = fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e24, 0x2e1, @empty, 0xc58}}, 0xc4, 0x5}, &(0x7f0000000280)=0x90) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r10) r11 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r11, &(0x7f0000000600)='4', 0x4100) 00:24:58 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, 0x0, 0x0, 0x5, 0x3}}}, 0x90) 00:24:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 359.031998] IPVS: ftp: loaded support on port[0] = 21 00:24:58 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x0, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:59 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={r8}, &(0x7f0000000700)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r10, &(0x7f0000000600)='4', 0x4100) 00:24:59 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, 0x0, 0x0, 0x5, 0x3}}}, 0x90) 00:24:59 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x0, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x881) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)) gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = syz_open_procfs(r4, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000280)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) syz_open_dev$loop(0x0, 0x0, 0x182) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000000)='*!md5sum\x00', 0x0) seccomp(0x1, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="084dfe8c7db5b7fef5597fe9360d34cba7f0f1fbf807", 0x16, 0x10001}], 0x0, &(0x7f00000002c0)='*!md5sum\x00') ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x81805) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x501ac0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={[], [], @multicast2}}, &(0x7f0000000600)=0x14) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r11) ioctl$SIOCRSACCEPT(r11, 0x89e3) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000300)) time(0x0) 00:24:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:24:59 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, 0x0, 0x0, 0x5, 0x3}}}, 0x90) 00:24:59 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e8ffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r8 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r9, &(0x7f0000000600)='4', 0x4100) 00:24:59 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x0, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:24:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 360.522464] nla_parse: 3 callbacks suppressed [ 360.522469] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:00 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:00 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r8, &(0x7f0000000600)='4', 0x4100) 00:25:00 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0x0, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x881) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)) gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = syz_open_procfs(r4, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000280)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) syz_open_dev$loop(0x0, 0x0, 0x182) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000000)='*!md5sum\x00', 0x0) seccomp(0x1, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="084dfe8c7db5b7fef5597fe9360d34cba7f0f1fbf807", 0x16, 0x10001}], 0x0, &(0x7f00000002c0)='*!md5sum\x00') ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x81805) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x501ac0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={[], [], @multicast2}}, &(0x7f0000000600)=0x14) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r11) ioctl$SIOCRSACCEPT(r11, 0x89e3) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000300)) time(0x0) [ 361.050169] net_ratelimit: 20 callbacks suppressed [ 361.050174] protocol 88fb is buggy, dev hsr_slave_0 [ 361.055208] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.060244] protocol 88fb is buggy, dev hsr_slave_1 00:25:01 executing program 0: syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0346ba9120f8a88353b8c100000001010004fbff"], &(0x7f0000000040)=0xa) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffd7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) 00:25:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:01 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:01 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r8, &(0x7f0000000600)='4', 0x4100) 00:25:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x881) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)) gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = syz_open_procfs(r4, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000280)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) syz_open_dev$loop(0x0, 0x0, 0x182) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000000)='*!md5sum\x00', 0x0) seccomp(0x1, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="084dfe8c7db5b7fef5597fe9360d34cba7f0f1fbf807", 0x16, 0x10001}], 0x0, &(0x7f00000002c0)='*!md5sum\x00') ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x81805) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x501ac0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={[], [], @multicast2}}, &(0x7f0000000600)=0x14) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r11) ioctl$SIOCRSACCEPT(r11, 0x89e3) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000300)) time(0x0) 00:25:01 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0x0, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:01 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0x2a}], 0x1, 0x600) recvfrom$x25(r4, &(0x7f0000000380)=""/55, 0x37, 0x0, &(0x7f00000003c0)={0x9, @remote={[], 0x1}}, 0x12) write$P9_RVERSION(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030300900fc9cd866b42938ab0142624904b40d651a9b3672476a814ac42843aa88e1db60ba47b6bb30407402000000349f062e4624400100000000000000e03a80b9374275d0f7b100237209ffe467ab1296c3c5085a515cf18151210b8615d54f1c7f3e9ef2ec1577c935216a586171a0aca40d531e7d4986fe59ec1406936a1b561565ffefd7652e6c949d9a7f95f42d36d892d4b30cc1fc50434686595553e6f3381cf655df317fe9ca3533e7afb1ced5c006e691b4999cf6c0aae1178e256baacb07e6f80b9f8e6bc4f3b57d528930399f5c7903c06e4298f2d6774ba4d327c8c4c783340d84b8252dc0961fdc1816a67772058c027c491d1761cd867b446e1d09fc35834cb3e8e0ed7bde47964dc091ec1ce2dd7bfa8c430600000000000000ce550d9645db0c58453350fa101f5aae17559fcfd2bd00000000c2621a68a28ccc39235cdf20d22060d3c8f352e341635ee4aab0aad9d953e0a7dd37de2bfc4fc5d81bfa4264c89a612bf74868309f840cc82f1cb476a4eaa8728c3425a50c9ffb680f44aff1e913a7f5b3158696196345a4caebc08e692861bbd2304b31f7c58fe55f668b9420ea754930458873cec2e3869c70cc78c2a06f70c33a4c09e6195262ae96eec759aae838435429bd039f8ffde4c529d7dc83c298a16cd17d01d46e41ebfeef9fc6f935e8f745bd1208d4d5b226eff70000000000000000"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000640)={0xc, @sliced={0x1, [0x409, 0x3, 0xf859, 0xc1, 0x3, 0x80, 0x81, 0x6, 0x3, 0x1, 0x11, 0x1000, 0x7, 0x7c, 0x0, 0x7, 0xf001, 0x8, 0x9, 0x9, 0xca0, 0x5, 0x0, 0x3ff, 0x9, 0x100, 0x1, 0x7, 0x4, 0x6, 0x2, 0x5, 0x0, 0x3, 0x3, 0xfffd, 0x5, 0x5, 0x6, 0x1, 0x1c15, 0xffff, 0x7, 0x7, 0x5, 0xff7f, 0x7, 0x6], 0x5}}) write$P9_RAUTH(r3, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r3, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans8fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x2, 0x4) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) fcntl$setown(r0, 0x8, r6) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) [ 361.600112] protocol 88fb is buggy, dev hsr_slave_0 [ 361.605212] protocol 88fb is buggy, dev hsr_slave_1 [ 361.610318] protocol 88fb is buggy, dev hsr_slave_0 [ 361.615368] protocol 88fb is buggy, dev hsr_slave_1 00:25:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 361.738176] kauditd_printk_skb: 11 callbacks suppressed [ 361.738182] audit: type=1800 audit(1569630301.303:109): pid=20447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=20 res=0 [ 361.771377] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:01 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r8, &(0x7f0000000600)='4', 0x4100) 00:25:01 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0x0, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:01 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 362.160119] protocol 88fb is buggy, dev hsr_slave_0 [ 362.165238] protocol 88fb is buggy, dev hsr_slave_1 00:25:01 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0x0, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 362.222945] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 362.287582] audit: type=1800 audit(1569630301.853:110): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=21 res=0 00:25:01 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) pipe(&(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r7, &(0x7f0000000600)='4', 0x4100) [ 362.480748] protocol 88fb is buggy, dev hsr_slave_0 [ 362.486334] protocol 88fb is buggy, dev hsr_slave_1 [ 362.632184] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:25:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x881) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20000102000007) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)) gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = syz_open_procfs(r4, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000280)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) syz_open_dev$loop(0x0, 0x0, 0x182) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000000)='*!md5sum\x00', 0x0) seccomp(0x1, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="084dfe8c7db5b7fef5597fe9360d34cba7f0f1fbf807", 0x16, 0x10001}], 0x0, &(0x7f00000002c0)='*!md5sum\x00') ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x81805) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x501ac0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={[], [], @multicast2}}, &(0x7f0000000600)=0x14) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r11) ioctl$SIOCRSACCEPT(r11, 0x89e3) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000300)) time(0x0) 00:25:02 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:02 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:02 executing program 0: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x404e20, 0x0, @rand_addr, 0x2000000000000000}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x4], 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@local, @dev={0xfe, 0x80, [], 0x26}, @local, 0x0, 0x5, 0x0, 0x400, 0x55c}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)=@hopopts={0x0, 0x0, [], [@enc_lim={0x4, 0x1, 0x7f}, @ra]}, 0x10) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x8000}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x76, 0x0}}], 0x2a6ebd569cc2fac, 0x20000805) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) [ 362.715893] audit: type=1800 audit(1569630302.283:111): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=22 res=0 00:25:02 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r7, &(0x7f0000000600)='4', 0x4100) 00:25:02 executing program 0: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x404e20, 0x0, @rand_addr, 0x2000000000000000}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x4], 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@local, @dev={0xfe, 0x80, [], 0x26}, @local, 0x0, 0x5, 0x0, 0x400, 0x55c}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)=@hopopts={0x0, 0x0, [], [@enc_lim={0x4, 0x1, 0x7f}, @ra]}, 0x10) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x8000}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x76, 0x0}}], 0x2a6ebd569cc2fac, 0x20000805) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) 00:25:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 363.216329] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.227781] audit: type=1800 audit(1569630302.793:112): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17326 res=0 00:25:02 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:02 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) fcntl$dupfd(r4, 0x203, r5) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r7, &(0x7f0000000600)='4', 0x4100) 00:25:02 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaac8aaffffffffffff08004500003000000068d12940d8aecc37abe0"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r0, &(0x7f0000001300), 0x0, 0x10000000) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) syz_init_net_socket$netrom(0x6, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001300), 0x0, 0x10000000) write$vhci(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x80000000) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={0x0, 0x5, 0x0, 0x15, 0xa251}, &(0x7f0000000540)=0x18) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 00:25:03 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 363.616879] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.651858] audit: type=1800 audit(1569630303.223:113): pid=20552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=23 res=0 [ 363.704999] overlayfs: filesystem on './file0' not supported as upperdir 00:25:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:03 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:03 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:03 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r7, &(0x7f0000000600)='4', 0x4100) 00:25:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000240)={0x0, 0x101, "a96d88fd48e21c6289ee12d3935dd782ebef941e419216a2013a7d92aa3294be", 0x9, 0x1, 0x0, 0x9, 0x208}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x298280) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={r9, @in={{0x2, 0x4e24, @loopback}}, [0x1, 0xcdd, 0x100000001, 0x8001, 0x4, 0x7fffffff, 0x3, 0x7fffffff, 0x8, 0x100000001, 0x7, 0x8, 0xfffffffffffffeff, 0x0, 0x80000000]}, &(0x7f0000000500)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={r10, 0x7, 0x8}, &(0x7f0000000580)=0x8) ppoll(&(0x7f0000000100)=[{r2, 0x2010}, {r3, 0x8000}, {r4, 0xde11ad728c2d5506}, {0xffffffffffffffff, 0x1a0}, {r1, 0x2200}, {r1, 0x80}], 0x6, &(0x7f0000000380)={r5, r6+30000000}, &(0x7f00000003c0)={0xed5}, 0x8) r11 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355620c000000000000350000000000000000204eb681d5434abe000000"], 0x3b) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r11, r11, &(0x7f0000000000), 0x8080fffffffe) 00:25:03 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:03 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 364.181312] audit: type=1800 audit(1569630303.753:114): pid=20581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=24 res=0 [ 364.296675] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r0, 0x4, 0xb, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000440)=0x7) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) [ 364.378493] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.392013] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:04 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) 00:25:04 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:04 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r7, &(0x7f0000000600)='4', 0x4100) 00:25:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x36656510, 0x8000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) close(0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0xd000, 0x6, 0x7, 0x0, 0x0, [{0x1, 0xa3d, 0x800}, {0x8d, 0x101, 0x3e4000, [], 0x401}, {0x9, 0xffffffffae033535}, {0x6f, 0x0, 0x100, [], 0x100000000}, {0x6, 0x53f, 0x5, [], 0x7}, {0x5, 0x0, 0x1b1, [], 0x9}, {0x5, 0x7ff, 0x40, [], 0x9}, {0x1000, 0x0, 0x4d89, [], 0x5}, {0xe, 0x7, 0x7, [], 0xfffffffffffffff8}, {0x9, 0x7fff, 0x7fffffff, [], 0x4}, {0x2, 0x3, 0xc23}, {0x3, 0x0, 0x8001, [], 0x1020000}, {}, {0x21, 0x5}, {0x885e, 0x0, 0x7ff, [], 0x1}, {0x8000, 0x8, 0x4b8d}, {0x32ef, 0x6, 0x80000000, [], 0x3}, {0xfff, 0x80000000, 0x0, [], 0x100000001}, {0x3ff, 0x800, 0x1}, {0x0, 0x0, 0x8}, {0x6, 0x81, 0x6}, {0x3, 0x7ff}, {0x7ff, 0x0, 0x80, [], 0x3ff}, {0x0, 0x0, 0x0, [], 0x8}]}}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 364.622479] tpacket_rcv: packet too big, clamped from 65535 to 65392. macoff=96 00:25:04 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) 00:25:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r0, 0x4, 0xb, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000440)=0x7) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) 00:25:04 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r7, &(0x7f0000000600)='4', 0x4100) [ 364.912268] audit: type=1800 audit(1569630304.483:115): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=25 res=0 00:25:04 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 365.133965] audit: type=1800 audit(1569630304.703:116): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=26 res=0 00:25:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x36656510, 0x8000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) close(0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0xd000, 0x6, 0x7, 0x0, 0x0, [{0x1, 0xa3d, 0x800}, {0x8d, 0x101, 0x3e4000, [], 0x401}, {0x9, 0xffffffffae033535}, {0x6f, 0x0, 0x100, [], 0x100000000}, {0x6, 0x53f, 0x5, [], 0x7}, {0x5, 0x0, 0x1b1, [], 0x9}, {0x5, 0x7ff, 0x40, [], 0x9}, {0x1000, 0x0, 0x4d89, [], 0x5}, {0xe, 0x7, 0x7, [], 0xfffffffffffffff8}, {0x9, 0x7fff, 0x7fffffff, [], 0x4}, {0x2, 0x3, 0xc23}, {0x3, 0x0, 0x8001, [], 0x1020000}, {}, {0x21, 0x5}, {0x885e, 0x0, 0x7ff, [], 0x1}, {0x8000, 0x8, 0x4b8d}, {0x32ef, 0x6, 0x80000000, [], 0x3}, {0xfff, 0x80000000, 0x0, [], 0x100000001}, {0x3ff, 0x800, 0x1}, {0x0, 0x0, 0x8}, {0x6, 0x81, 0x6}, {0x3, 0x7ff}, {0x7ff, 0x0, 0x80, [], 0x3ff}, {0x0, 0x0, 0x0, [], 0x8}]}}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:25:04 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) 00:25:04 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x11, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) 00:25:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x9371857ebb69e838, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x3ff, "cc447e8233ff33b62c9f7597590b01f41b4b7fc7c581a3e30486fa20479d926e", 0x0, 0x75000b2568519c9b}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000600)={0x0, 0x0, 0x2080, {}, [], "dbe9420e424989b70dbf40138840f359b4781d8c74a76e4845e69c5ca319b1ae418207c1ac4f9df6c06b5fc6a75b654dc6ca8df6d261c41362648fa3244dbcad6489fa7ce93cf13a0ef712f8347dc95c9db709748953db9f07e7c7a2118a24b19a7ebe21494867c996638e4cab8022ea7040acf5b80012f77aaa30a1ecc6c4a6605012c7cfa13002cfbcfeeb725a4b88c60c21d993d1bae174fa07943d20716968a4341acf6f5cda3584c2133cfda621ce80fee05a52ecadc0394f68a6d15a318aed0f723beb429a0040f919341ac3ec2ff0eae57fff5c96a12203829c168446ddd04c51ba8d63bfca0ea6ceb549989f90bfb08928590af88351c147ceddabbffaa26bfcbdc89c3f3f76be11d100d7f93ba6b28ce89882b7a183b9d8919e96e7d132ddbe67ceb95550d6076a8473f05937b681cb158090cffe833b534a0d72af2cca304fa3e87353be0e730f96cda0ebf668e341061a01a4fd3927c7e5dd464b0994df1b306026826990b5aafdbcab132e8c536814891c99c76f60813585ec1e72f9fcfd0f180f22596fb50e4b8daecb14738a10786e6726a93e6d288d1023cfcb67326564fa4c125f4447c74b0abbe788eed40ae15cfe16e4839bbe16e269221f84243bc4a3571c74fc52468e8fce9ce22dca81ff3db77f12b748f5aa7723b668305bbaafee026dfea7d86cc8424c15771ad3c8dfac42fa6c7da25df3c8d3da4f67249f2485601642d337df296cdcac4fc3a037ef8e8b05a2dd6f67a784ff6d43162339a98ccc330f8c68757898806b83549c0eb281336160eb6920f79897998920dd53c1a66ba73406b4c472abf6c3560e58f199e2dc75bd08b7e1ce7b4c7cd43977268a8fd10f633e4caf08d836fbc4272054c39ea86c6905ed59c4af6aec96354effb8b17fdc04263508dd9bd2b2e900efce5fd32c7286e812d95c073a12550ff0734d6aa8761dbc37a2a6566cc186d5dbbbb8409a53f927e6595270bc566546101e524926957973cf473f38ccda62cc7adc3bd69bd2c7a59e3f0d52362eecf4f599232f40863c10a3ba50f6ffeac3890aef8b69d07667063b168c39abb5baab35a3373c87787e2f90de5b99eaa15a4d477ef21032204f913cddb0839d67995e35dc2332298c469bf7a4816a712e5d2efca33906236d56130e048cfdde5d3bd0a5569b1640fd6f07b91e699037275839a906adcc9feff9f64e83a21e6af066c20a16ba36221bec7c1989e1a575872286c560bf0c4672931d16de4e9fbf082ea2e588237cf4f942707072cdb409a2a31700638049807e60407980164f4aff7d195092b6d226ea80f9f8a9a7fdf2317b3950f68d4e0ea6af45841c80eca2755566f00b1bdec303e4afd1e416fd84eae3b9af24a86ee2ed05daf405cc2b573fd35fc989f54bf9f4427cb4e9ccbb1e4aa177056e088b56eac5aa3930ca74c5cb51f5ee6eead87c30bbafcd8721482134a38eb6160036526bfc1aeea7c0c5bc0a267e880b224a2da71ca2d8ca6d7f20809463e03519dbb23b438e91a11ba521d95fb9e8ab923c7322152e7fd646d81256770f988403de10ad7b1165ace73c6a868f7dd8ce8b0de3e1c331d577f07ecabab307fafaa5453bc4f95be3c10de113b89e46c06fec8b4056fffb928e76cf0a435ccab0980956dd55e4ab90680a644e92c2816bc20aebf1b5851405ec2b0c13a10dd60aea759348e4f338dbc625f37ac76af25fdb855f5d72e5fcf58df5b7e8669d76bbb3aac44b2c09d208969481ea1b2031b867d6284be7133be2d1a09fde403fc22d295d22be80dd555610f107ce735a92eb52d8b10174a6fc4cdf8737354ca02db0a6ae842b7657a2081ff8dd9f867ab3ad085f26ccccdfcb612ddf8d9f1fd6a05bc4e2bd1cf44cbae1e51ca3ad0d7489fd04655a61ef4be649e1981b8fe4636aa9731562b3da2851450c10f28dcc01adb3cfc08a578fdc0cf0c146d1dec5d4d7fccadebe2d3272ff0f86fb8de66419e9e31e2cced2815ff000652c7e1070e69aeafa750ff996690dff1e8c552c451301204baf4a544d5c9ecafaf8428ca6cb6c87188ea9daebabd398a70a96fd796318ecc42097ae34610dc1bd6c9a7b9c4e30521ee7ccd2f08ffbda442cb5bf160882ffde309ebe8d9c7944d54a9d238d33209538b157a7ab288dbcf820ea9e5c5a9054e4fb840c3e7ad5fefd0ee43849acaa8879a0e758b0b92b19cccc2aad8ab39138cc857188102529871e1d7dc882402ad855774213d1a6d3d12d5937cc727ea02a5110dcb15e7001a4aea13bee4f8479f7058fbb442799841714555ee7e1da51d8934b91926e8af5d866553226315bb8c3b30613f653aacab3b08602db05445de31e140c654ad54bca7c051b0d7ac7f91efdf9de09150ff0921c0b4d586f2acf467c36e8310ec5e8e445f79eaba455ac86232ac0f8d05ec14ab13763c81b24a43a1326728a9d1c814b8826d550b0815d12910a5c5ba89045cecf9f805319e30ea03faa2822d1eb218a501336f81be0b91b09340df3a3392ce24f3a9930e60e9ee2a024a20c2cc02d79e805348cac32657aca7743680077559c23f088aba33c0c850dd8fe593dacafb80e83b4914a016e44e390d19e91e22ebf1b9f0798e8b3f892ae7ec32a270d88a571cc37780c34acc98873ce5c8eb3c61295b66fae48e16fccd0b79030eb23e6649f4b8baa880e8af887187708ea119215d143f4b8a1e508c123d9d2dfd51f0bf7933e2522b1a69f22c6db3101b205b731e71fb3298204c4fd83575acd55fc59d22a379a32bbd9d3425bdfe9c35a5f0af5f538856bad52087c46ae8150d4dc4e82908215289df2206f19d254a4fd9d2c0747160c396a9a647b3f5fddddbb9890abfa4daff03ab3cd09154fa3bf8bdfeb4016a6407c0c1c0105ca53895b50410327da91c640fc5396b77149ff8eb80059d4847f02adefc51f2a9b612678ca0d381309be6b25f9d38e2b6ddaabeee83886f3e4c342cb9acd004c74824f5e3a0b27040ab9c395cb0849314306256f52b5c981c65c6b93d39c8990c40c800dd664b2c42079eeb95bf36ae86cb70f40ea163db231caf8155e1947577ef9a0882d1398b0334e0c76f9cbbd5e3966eda485a9f03950cb0a98a151d0f132a28d9072b4a965d2220d03adfcfcca8c3f9c8166da146d28881f7b0d0cb2678eed71584d5038704a275fb6c66515bb825aa5d5fa9e90ff09935e1a6cfad53f8426389f7a4967a90d6324870063b961751d69f2edac2bacb648a61e1a09f94a3ffe81b28474c43037b551e5d1b8a2252f8b4c59b9128bb55e3d5ae164a08eaadde3d49dab394ce1fa59d0b32f4dd7b035f7bdce080fdc07b3891184090873ced596fc7dda0ac3d7061bbc5eac53e909818276f29867ed773ea3e9a9a469ebe956e61352307f2fb286fae817c638175407087480842c00d5b4a82592f5677977c16a114ced99cf4b36e65b4317cc5e2ae74f97326b5cd2b4503ae6f42af25d6cdcfc9015b10e4f6206884416cd4d1a596401fe1c4339c63f1c42d056e41dc8cd811d7087a54c3eb4b8b333a78998053a7f06f55b69e06509b43fe0009bce26389555397bf50696233d2eb60fc10c1c9b1bb527eba4317a4ec9c08ca68cc5613db9cfeabeef467e56e4507b61f8ee4c552928c2db118f6ab969bd20ff37da35e9d3b1db203608951c377366f8d48510a87c3288d23ad74194f707933a4d93c9161012d5786799bad755627a4c38d611891e7855885dc54bda7d4698c87aad58b35d0bddc6339c8ec80804e3e6fc3a215d335574cb538954b33188a8d8dce562b2b62d803f8ebd400a9420ce1e658492e7516d59f985738cb40f79b1f6101719d3ac36aed23e9261dc6d13cfb2fd7423a172026ce3ca7b8f15be711c17b356dddf65e50ed580f5fde6b80bfb2b494e063585915d5a9ee2ff6f7eb1c992c1d0ef8333208e236e02909857c1b6d9cc592d5f9f83f9be24e53fe6ee47c7576191fd4f3ea8459a9f4d974c71d7c33aa38990ee7c5551519904b4a6df03cc886eab55db429b81102c4a00b4e1c873e7644c95b7437987d5bec6089eb0968ed2f2aac494ceb5d1021ba2804ff71b8e949d06f53e347905c32492457020fb81955532215088a02bd9fc21f6838fcf2c6a811dd2883fa96497d9bf51ec0663e647868be5fe4108f31f05a06b4e0d013bd725b49698a973fb894e6bc5f393a6a5d727d952687d4eeb3404484b93cfcbd75e4af9219b552329463a2c0a9f8057bd731ce95d7a8785549c62f92d1510a689e24fcaabe5e7da66930281cbb28fdd9df093c2c6c8a096de4af46e2e3656daf4e05e1ffbd6d2cb53f98041b6e1d33eb5e1cb2ac50a5c2f98aacc7447466e325e94a47ceb62503dc489d3658db38f412da8586b56120bedddf79ed7b86c5a12ab562073e5d4e137f7eaf09153b4f4c1c90fb68b852b0d7df47cdc55e945cd66a64fde0f46df4af6a0753495f14a0f84c21a59ff44af0e1f38f40aa3e82ac19c5d7983a2874a794b7b3c6966da5f40b0ce6344b607a6391ac99aa06fdb89606c5bbbcd97336230cada2df647346256a03b896beecba6aa7fec622209431a550ef2ddae396371e1d2d648fa4f22c9da6893520ba3ad7ea633ea5ce2c8f412a4633dbaae3d4691d0fb51a726b6ad5e9db87e66c8b27c61126819f451428b60d25dfc037426a91835f99063be81223db007d105f878f2a80d809e918ce11e24f4a3f0b355efcb380cc91262265c8906b88b4a11eb825b50475f12457fd04c45be8a6d77f75ea0dba368487cda9e47361d23a46c270ff719f5705b66ec812aab76aa9b9568e3ea24ae063b19621c3bd88d94bd07e1db5f84888f903fc3cbe26221d3be65a4eaedc1055f70d1f8be4ac72d8e25cb24d87dc9e5fa5ba887691bbb28b39833b0da6e4b1fc0f08860a80d8c1fef3e4e65912b021702ccf6d077962b7ee534d98f612cff20af4211f5687a6316d7a3470fcf8aeb110cacd369f0d3b29806d21570de2bec280acbc31c34b5fa768babc445933c8899c31a56489105ba5fd990a41b5e4a26d50ef2686016361f06773424dcc78e2767202e94ac0914f20888651bfe191348cb36c7d8bd96809e7bb1170d9cb36952be6066755c53719aad426d99db9667432aadf315c64b82db235b7b013abe27407181b33cea08d59d111203038c22e6c9e5486adba7a263feea2b8b66bf2eed475447b1088daa62aa0bec296284cc3eb0c24d1963a4507e71a44e7c16d1fafcf9aee2570fa9b12aa4dad9e4453f0aad5f01dce54c39da1e0f7df1c34ebe36057cc8143dccdd4aeedbf2c53f1d5eac7175f8b777018bc1c2a6af41008ed8d3103b1f58a44db4dd923b00735127ea961903368d48153a44501363676917cc77856407f2a56c32f8bd1566d246785b78f56c5273f1119e7cf45b5a9a62fb93e704f4a5c1711571a3318c2df854e25d3f396ff93d6828e4ced3ee5a9cda71beac98ba7cb593aaa1b1a92501b96bc54ae344394e0f088c2b09b10f522ca9364c58f77aac44a2445752ab5439205ef027e4d75d3a02e572bd0c4685a5e217fc7c7fcaf44a83d9f6bcc5c657a1dbdfe0568b66fa1067aad76417b01a3555fd14e4e01d8510d4929834f0963dfc12c6747571d6a062f65f31aef1e748c77f460b553623a2cf5d42d1ce648694ba18862b32a95ab482042d9fe819237c70b0cd20f9bd31fa0588f63acc6e24e37a6ea6a478c694169b8f2a9d0bfea5c0c9253f76ff6760fffe9235d07e560078c7fb9a19f13bc3a525f77a06154084dd05a521ac0a", "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"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="7a3ba45dd4bc75601b2bc3", 0xb}], 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r13) r14 = getegid() setfsgid(r14) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() setfsgid(r16) getresgid(&(0x7f00000003c0), &(0x7f0000000440)=0x0, &(0x7f0000000480)) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000002680)=ANY=[@ANYBLOB="02000000010002000000000002000f00", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000800", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="02000500", @ANYRES32=r11, @ANYBLOB="02000400", @ANYRES32=r13, @ANYBLOB="04000c000000000008000200", @ANYRES32=r14, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="71eb61ed", @ANYRES32=r15, @ANYBLOB="08000600", @ANYRES32=r16, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB="108cfddf21504500002000"/22], 0x84, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lseek(r1, 0x0, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r18, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) ioctl$KVM_RUN(r18, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 00:25:05 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) 00:25:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x36656510, 0x8000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) close(0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0xd000, 0x6, 0x7, 0x0, 0x0, [{0x1, 0xa3d, 0x800}, {0x8d, 0x101, 0x3e4000, [], 0x401}, {0x9, 0xffffffffae033535}, {0x6f, 0x0, 0x100, [], 0x100000000}, {0x6, 0x53f, 0x5, [], 0x7}, {0x5, 0x0, 0x1b1, [], 0x9}, {0x5, 0x7ff, 0x40, [], 0x9}, {0x1000, 0x0, 0x4d89, [], 0x5}, {0xe, 0x7, 0x7, [], 0xfffffffffffffff8}, {0x9, 0x7fff, 0x7fffffff, [], 0x4}, {0x2, 0x3, 0xc23}, {0x3, 0x0, 0x8001, [], 0x1020000}, {}, {0x21, 0x5}, {0x885e, 0x0, 0x7ff, [], 0x1}, {0x8000, 0x8, 0x4b8d}, {0x32ef, 0x6, 0x80000000, [], 0x3}, {0xfff, 0x80000000, 0x0, [], 0x100000001}, {0x3ff, 0x800, 0x1}, {0x0, 0x0, 0x8}, {0x6, 0x81, 0x6}, {0x3, 0x7ff}, {0x7ff, 0x0, 0x80, [], 0x3ff}, {0x0, 0x0, 0x0, [], 0x8}]}}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:25:05 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:05 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 365.722009] audit: type=1800 audit(1569630305.293:117): pid=20689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=27 res=0 00:25:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x36656510, 0x8000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x10000000000000a2) close(0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0xd000, 0x6, 0x7, 0x0, 0x0, [{0x1, 0xa3d, 0x800}, {0x8d, 0x101, 0x3e4000, [], 0x401}, {0x9, 0xffffffffae033535}, {0x6f, 0x0, 0x100, [], 0x100000000}, {0x6, 0x53f, 0x5, [], 0x7}, {0x5, 0x0, 0x1b1, [], 0x9}, {0x5, 0x7ff, 0x40, [], 0x9}, {0x1000, 0x0, 0x4d89, [], 0x5}, {0xe, 0x7, 0x7, [], 0xfffffffffffffff8}, {0x9, 0x7fff, 0x7fffffff, [], 0x4}, {0x2, 0x3, 0xc23}, {0x3, 0x0, 0x8001, [], 0x1020000}, {}, {0x21, 0x5}, {0x885e, 0x0, 0x7ff, [], 0x1}, {0x8000, 0x8, 0x4b8d}, {0x32ef, 0x6, 0x80000000, [], 0x3}, {0xfff, 0x80000000, 0x0, [], 0x100000001}, {0x3ff, 0x800, 0x1}, {0x0, 0x0, 0x8}, {0x6, 0x81, 0x6}, {0x3, 0x7ff}, {0x7ff, 0x0, 0x80, [], 0x3ff}, {0x0, 0x0, 0x0, [], 0x8}]}}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 365.877578] nla_parse: 2 callbacks suppressed [ 365.877584] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:05 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:05 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:05 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x11, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) 00:25:05 executing program 0: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x11, 0x400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$unix(0x1, 0x1, 0x0) getsockname(r1, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80) socket$unix(0x1, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @empty, r2}, 0xc) 00:25:05 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0xc686be2749f9254, 0xfffffffb) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x925, 0x40000) r2 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x0, 0x5000c2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cuse\x00', 0x2, 0x0) r4 = socket(0x2, 0x1, 0x2) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vfio/vfio\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$caif_seqpacket(0x25, 0x5, 0x5) r9 = socket(0x11, 0x2, 0x0) setsockopt(r9, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ppp\x00', 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket(0x11, 0x2, 0x0) setsockopt(r12, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) r16 = syz_open_dev$video4linux(&(0x7f0000000800)='/dev/v4l-subdev#\x00', 0x9, 0x402000) r17 = socket(0x11, 0x2, 0x0) setsockopt(r17, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r17) r18 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r19) r20 = getegid() setfsgid(r20) r21 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r22) r23 = getegid() setfsgid(r23) r24 = socket(0x11, 0x2, 0x0) setsockopt(r24, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r24) r25 = socket(0x11, 0x2, 0x0) setsockopt(r25, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r25) r26 = getpid() sched_setscheduler(r26, 0x5, &(0x7f00000001c0)) r27 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r28) stat(&(0x7f0000000d80)='./bus\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getpid() sched_setscheduler(r30, 0x5, &(0x7f00000001c0)) r31 = getpgid(r30) r32 = getegid() r33 = getpid() sched_setscheduler(r33, 0x5, &(0x7f00000001c0)) stat(&(0x7f0000001080)='./bus\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r37) r38 = getegid() setfsgid(r38) r39 = socket$pptp(0x18, 0x1, 0x2) r40 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x80000) r41 = getpid() sched_setscheduler(r41, 0x5, &(0x7f00000001c0)) r42 = getuid() r43 = syz_open_dev$rtc(&(0x7f0000001300)='/dev/rtc#\x00', 0x3ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r44, 0x8912, 0x400200) r45 = openat$null(0xffffffffffffff9c, &(0x7f0000001340)='/dev/null\x00', 0x10000, 0x0) sendmmsg$unix(r1, &(0x7f0000001480)=[{&(0x7f0000000240)=@file={0x8cfc8000c9cf5652, './bus\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="3ff1b633f46286619b5867ecdd8f12955f8bc9941d164184da3eb5490c4734d308600cad1ed5b3f7c212bc72714af3f01cde4f3f12b0f32484dfd679c8ff4ffe543577ea768b8f9040bd3d5070376d51d95844cfc55450aeec5ebf9c652ee8f39285cc188b1479f2bf6e54168fb31dd1fa93edf806e7570af829b84c23ac4221dbdf023dafb685060474ee2eb0db761741b44fc1104cf2e25ae0b4295fc0bd5f402b9aa91fd5e0dc3ccfce", 0xab}, {&(0x7f0000000380)="968b018db0ff81792237801d73f2394bcff049a3e447af22e3e60277efdc55deab3ec2db93f6588349468bed3ee223870e98a4eb69a9fe1147015b058ee01ef0c3a52cfb42a7dc8bc06c60a85b81ff52b5", 0x51}, {&(0x7f0000000400)="99f5aa5d4386f21883d237f69d67e098b6466533f180565ea4588e65d819d5327cb189177980b3ebdcec63797e5829c53edccbd00280ab99f648aa71fb4f76479c06b33ef05857f4a894c7a465cf91471f558eaa0aab4c2e3c3d40804eb5110e821f6bba3936a91ab3f467d6149e981278560ebdc5b22099cc5abf0775f13f350969fe4186357562b357465e944e06e4a8d4d4dccb4dc94396ecb6c66ad5b746409c961bafdd1f336b287c4d821cd6e953815d65d252c89dbc6c75cceb04d1eb32d0c488192a9a3af3e57e362af0418e31", 0xd1}, {&(0x7f0000000500)="11ac77974dbd78d9c4c6c907f3d553238c4ad4b893400467b6dbf93a8ae970a9efd852c96a7a1e85d5846133985ee74310d48709aeaa26fabee93efea07bd949f2779bce41ae2791f9c2ce4689c3a4230255862fa885f8e36a8827171c2b1b351fb123b188d0c67556b0b5237e2ed4436b4a690b48fb6fee0f46a76173937ab48f7f275aecc2f2da4fa4c0477a14b7140ca603b31a1acc5316ad40dba29f36ac3f13745f", 0xa4}, {&(0x7f00000005c0)="9ba91cfea4c0972bc2b587c4dc0b3ea5b2f891d08e741c19f1650a144bdc7b57955ce8837ecf1e60636c0c0a079407242318442efc1605f1e6ca9b", 0x3b}], 0x5, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r4, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r6, r7]}}, @rights={{0x20, 0x1, 0x1, [r8, r9, r10, r11]}}, @rights={{0x28, 0x1, 0x1, [r12, r13, r14, r15, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r0, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r22, r23}}}, @rights={{0x18, 0x1, 0x1, [r24, r25]}}, @cred={{0x1c, 0x1, 0x2, {r26, 0xee01}}}], 0x100, 0x10000004}, {&(0x7f0000000940)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000009c0)="27e4e9ea7ac1c92859fa7993915eb9c4b70293136952ea2561f0a70d5e30905d560e0c2bdcac00b6bb95e4fd5a244166b1c4a98ef2d6ef6bd9cc38484804e2e9d1d7017d0a818807e704e5acaff41d4c4f637bbcb677d3da10b5fe227425f9d936534062a0945c9d10260e10cd98776109ad0d3e12a357e52e1e34baa69e", 0x7e}, {&(0x7f0000000a40)="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", 0xfc}, {&(0x7f0000000b40)="4f3a93a39b0068cd80026210c7bdd957fefdb348344efce0d3e5e364c42470285cd74d93c5edfd31021eb79a28b40efa8a45bd1459302163abc727e1cea05e87087927b5c89cb2e53917f7cf463f7233b7194e60d7c6902f9bf4cf43ab5cff2740dc", 0x62}, {&(0x7f0000000bc0)="3af22e8c51feb6d9fa8e2946d7272fb6d64a8cb87d13079ecc58055c6d405807cf2a961e13a6d68a9310f180a58b2e873d41a2cb1862c024017a1693548f77bd2a2742cbba324988d416bbd812efb76101c85c83ce69c0fdedaf5afdd766f4e65c9504d6f7cae7658ff38f15d36cd3dfd82cb360f1dd7ea4d09defd32fed0a8510ee7764f4ee8e90650a0a932666553d7e00ffbdf11badc1f9c943cf5fcf7e1dba3dfe3180e2617d04f57027f8c985798a6b4199b84aab15aaa6ab2fff7abdc9bc56e4e5b9929358e270c08cd793040b99c80ee701412cc0228e444ecaa75da8b5ce3289bad7f4794602683515b7", 0xee}, {&(0x7f0000000cc0)="81e1036ed29e6e75b06f230ed88f92c257d6d4d48d3423551bf92b23c6d615", 0x1f}], 0x5, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r0, r28, r29}}}], 0x20, 0x8000}, {&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)="ce62a76da0545f06cf5afe3378c95f1e8c5d45e3b512bc78bdd040e17b8d00362e7f46f9853fe9c1e22baea0bc12aa242cd6c9a75aaede8a2831f7134a5b415a6d2863831e7ba8b4b439fee52dee404fef84747736db4d2eeaafe23d523e2158c9b44c5394add31c8b13dbd8545d607481bbdbdcfc0a037ba1d467e46749245cef20af2e5f1817d36f457c7b8b4a88e74f393f325f4985ae3ca6a0caa70ba69aacbda50789e7cf21cdf65399481d40b54f823ed0aada", 0xb6}, {&(0x7f0000000fc0)="d409be2d0c09b5c33758884017ab948f4989896c5927", 0x16}, {&(0x7f0000001000)="a42c32ebe29e6820a683df2e322f87", 0xf}], 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="1c355c2c863aaf843a0700000000000001000000020000002890c6cbff76a7249e9f55c088f57afb2ba2dfc02056df", @ANYRES32=r31, @ANYRES32, @ANYRES32=r32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r37, @ANYRES32=r38, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r39, @ANYRES32=r40, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r43, @ANYRES32=r44, @ANYRES32=r45, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x800}], 0x3, 0x20000010) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r46 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r46, &(0x7f0000000080)={0x14}, 0xfffffff4) r47 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x400) ioctl$SIOCX25GCAUSEDIAG(r47, 0x89e6, &(0x7f00000000c0)={0x5, 0xf8}) tkill(r0, 0x1000000000016) 00:25:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x8}}, 0x1, 0x2, 0x9, 0x80, 0x5c85e22ae8f61123}, 0xffffffffffffff71) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = creat(0x0, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000002400)}], 0x1, 0x1) lseek(r5, 0x0, 0x3) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000200)=0x9) setsockopt$inet6_int(r4, 0x29, 0x8000000000000004, 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000140), 0x8) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) accept(r4, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xfffffffffffffe63) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000540)=ANY=[]) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000080)=""/33) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000100)=0x7) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000180)='./file0\x00') read$char_usb(0xffffffffffffffff, 0x0, 0x442234b9037505c) [ 366.320106] net_ratelimit: 20 callbacks suppressed [ 366.320111] protocol 88fb is buggy, dev hsr_slave_0 [ 366.330244] protocol 88fb is buggy, dev hsr_slave_1 00:25:06 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 366.414851] audit: type=1800 audit(1569630305.983:118): pid=20737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=28 res=0 [ 366.497283] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:06 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/50) 00:25:06 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x11, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) [ 366.640126] protocol 88fb is buggy, dev hsr_slave_0 [ 366.645288] protocol 88fb is buggy, dev hsr_slave_1 00:25:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:06 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:06 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c9, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000580)={0x80, 0x7, 0x0, [{0xa56, 0xa66, 0x3, 0x7e, 0x9, 0x40, 0xff}, {0x0, 0x7, 0x9f, 0x0, 0x9, 0x1, 0x3}, {0x0, 0x2, 0x4, 0x7f, 0x4, 0xfc, 0x4}, {0x2, 0x7, 0x0, 0x0, 0x0, 0x6, 0xf1}, {0x9, 0xfffffffffffffff9, 0x1f, 0x0, 0x0, 0x81, 0x2}, {0xffffffff7fffffff, 0x3, 0x6cd, 0x7, 0x72, 0xfb}, {0xff, 0x7, 0x8, 0x4, 0x83, 0xf8, 0xff}]}) write$P9_RCLUNK(r1, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r6, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$adsp(0x0, 0x0, 0x100) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) renameat2(0xffffffffffffffff, 0x0, r7, &(0x7f00000001c0)='./file1\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) [ 366.800806] protocol 88fb is buggy, dev hsr_slave_0 [ 366.806534] protocol 88fb is buggy, dev hsr_slave_1 00:25:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000002c0), 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\x00L l\x00\x11z\x03', 0xffb}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008010) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x5}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) r2 = syz_open_dev$usb(0x0, 0x40000fffffb, 0x0) close(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000380)={0x10}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 366.993510] audit: type=1800 audit(1569630306.563:119): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=29 res=0 [ 367.291830] protocol 88fb is buggy, dev hsr_slave_0 [ 367.302657] protocol 88fb is buggy, dev hsr_slave_1 [ 367.325898] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:06 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) [ 367.343959] device bond0 entered promiscuous mode [ 367.349589] device bond_slave_0 entered promiscuous mode [ 367.366671] device bond_slave_1 entered promiscuous mode 00:25:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 367.392691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.465223] device bond0 left promiscuous mode [ 367.484751] device bond_slave_0 left promiscuous mode [ 367.505428] device bond_slave_1 left promiscuous mode [ 367.524199] device bond0 entered promiscuous mode [ 367.529122] device bond_slave_0 entered promiscuous mode [ 367.540662] device bond_slave_1 entered promiscuous mode [ 367.555061] 8021q: adding VLAN 0 to HW filter on device bond0 00:25:07 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r1) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x2000000000000074, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c9, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:25:07 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x65b3fac4) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x11) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200147fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x358) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x40000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getpid() 00:25:07 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 367.736401] audit: type=1800 audit(1569630307.303:120): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=30 res=0 [ 367.840121] protocol 88fb is buggy, dev hsr_slave_0 [ 367.845232] protocol 88fb is buggy, dev hsr_slave_1 00:25:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:07 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) 00:25:07 executing program 3: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 367.989770] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r1) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0x2000000000000074, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c9, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:25:07 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 368.273291] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.291779] audit: type=1800 audit(1569630307.863:121): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=31 res=0 00:25:07 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r10, 0x4018ae51, &(0x7f00000000c0)={0x10000, 0xffffffffffff5bee, 0x8}) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000180)={{0xa, 0x4, 0x0, 0x8001, 'syz1\x00', 0x4}, 0x0, 0x20000000, 0x6, 0x0, 0x9, 0x7, 'syz1\x00', &(0x7f0000000040)=['/dev/kvm\x00', '+eth1-#losecuritykeyring+{\x00', 'userGPL+\x90\x00', '/dev/kvm\x00', 'self]\xc8(eth1\x00', '/dev/kvm\x00', '/dev/kvm\x00', '$/*@!\x00', '/dev/kvm\x00'], 0x64, [], [0x9, 0x20, 0x3ff, 0x8000]}) r11 = dup(r5) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) ioctl$VIDIOC_G_CTRL(r11, 0xc008561b, &(0x7f0000000000)={0x5, 0x80}) 00:25:08 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r6, &(0x7f0000000600)='4', 0x4100) 00:25:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4100, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x8, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) 00:25:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r1, 0x7ff, &(0x7f0000000240)="e786cd01527b75727a14a6b7935ed9f789161570be730c203b97bebe9d60cf339a132d02614c5521c890df795e11ad803c74b53f814da3ac8d0230076f262d418de79a4072e7fdb45e1eab41bcc2d8a198eeb31dbe701fa1f4445980eccbf0b483e2bb42b793284a7b32a455c2a424b3089ad66fb5c3a230c3cb360b111b9f0a905f80171dac8b818d996f2c9d774bb12c0b8fbeb67652cbbe7e69823e6cbe6184aeb82feeff8f6c4f908400f9bf0bb6238acb7def37b6a4149eab60a0b1cdd00f68109227aa60374357da1c36b225171a52373648bf5ba769eca423a48192a05ba8cfdb2eba770908edf2add352f6efaec77be731e74ab9") r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$NBD_DO_IT(r2, 0xab03) r3 = dup2(r0, r0) write$P9_RMKNOD(r3, &(0x7f0000000000)={0x103b1}, 0xfffffee2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) fadvise64(r4, 0x0, 0x1bb2, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)='%'}, 0x20) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f00000001c0)) 00:25:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:08 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 368.620305] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.647920] audit: type=1800 audit(1569630308.213:122): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=32 res=0 00:25:08 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x61883bea5100b932, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x40040400) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40800, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa5c, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x4, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x4}, 0x0, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x6}, 0x0, 0x9, r2, 0xc) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="980000000900000000000000b2f894dcfb77b5f9d3328663d337280fad45a71dbbdb3b2d266db52e98951890628295fb89d47a32da7d63055295f2d0afd86da3d859f90c1a683083df97335cfa0d58acdbabb90195ac1787da1e0d7cb728d9f99245b91efd46e79df009ff46749e1277a245ed371bde77738379af42f29aad543a88b9000ed5205e1c01bc8136a607022c22a743e4393154415f"]) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) socket$inet_sctp(0x2, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 00:25:08 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) 00:25:08 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 369.002091] audit: type=1800 audit(1569630308.573:123): pid=20886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=33 res=0 00:25:08 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) [ 369.100384] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:08 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:08 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 369.381938] audit: type=1800 audit(1569630308.953:124): pid=20903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=34 res=0 00:25:09 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) 00:25:09 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 369.642297] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81) dup2(r2, r1) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x37) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) getpeername$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000500)) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600), 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x10000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) acct(&(0x7f0000000180)='./file0\x00') ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:25:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'team_slave_0\x00', 0x5000}) mq_notify(0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000100)=0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000017600104008e0900120000571d000000006af082f176878ec9572f358e14aaddf700000000000087a7c94cf1e28fdbccb95119928e4386445c790e9855be0475be"], 0x44) 00:25:09 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 369.711951] audit: type=1800 audit(1569630309.283:125): pid=20927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16914 res=0 00:25:09 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) [ 369.922178] sg_write: data in/out 262460/26 bytes for SCSI command 0x0-- guessing data in; [ 369.922178] program syz-executor.0 not setting count and/or reply_len properly [ 369.993174] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.003189] audit: type=1800 audit(1569630309.563:126): pid=20943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=35 res=0 [ 370.028527] sg_write: data in/out 262460/26 bytes for SCSI command 0x0-- guessing data in; 00:25:09 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) [ 370.028527] program syz-executor.0 not setting count and/or reply_len properly 00:25:09 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:09 executing program 0: r0 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0xf3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x300, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) stat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timerfd_create(0x3, 0x800) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x178, 0x0, 0x722, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @rand_addr="36245fe97d7fd07c8c2dbe8790ba806c", 0xe8e7}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x71}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10befab7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x429}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x81) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) tkill(0x0, 0x0) 00:25:09 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 370.163818] Process accounting resumed 00:25:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 370.236072] Process accounting resumed 00:25:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 370.405886] audit: type=1800 audit(1569630309.973:127): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16626 res=0 00:25:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:10 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:10 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x5c, &(0x7f0000000000)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x40000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000100)={0xa0000002}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) io_submit(r1, 0x3, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x251, 0x0, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x0]) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000180)) [ 370.458154] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:10 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e21, @rand_addr=0xca09}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@mcast2, 0x80000000, 0x2, 0xff, 0x1, 0xa29, 0x4}, 0x20) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r6) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) dup3(r4, r3, 0x0) r7 = socket(0x11, 0x2, 0x0) sendmsg(r2, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0x494c603ce4de753d}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)="40c7e7ab72efd9c034fd8f01341934c92fabfb1f4188df5225a1e27b37e3", 0x1e}, {&(0x7f0000000400)="a7c322171029731c69a2940efee7144e515c29d6598870fae36c757087645c37acb7e2", 0x23}, {&(0x7f0000000440)="85d51b27843a866625f7608fb2097b", 0xf}, {&(0x7f0000000480)="373c26e8f21ea83e414a2f578aa39608bc59f2b24b6900be9666aed13085aee48cf717be4bf2eae6f0f5539c31e911d18e8e426a6e19efdce0c3792c06e8043dcea4bc9afe5356baf8abcc08df344393992882d17baa153c7b07c791c1b2142993a8d428b91d5da5fef098120adc34b4051284543e171059aaa9579677c6e9ac7e1afb79eba6c9f29bb327e0044cedd04fb4040a30a09d5acda8af72768c2610936f85f46bcea95307275a89b4a574a827c39dd2003d898fb6d60b897b0dd716e6e9da2a75d2e79d96a55ea3810ec2712e6580b897ccd424b6e08777", 0xdc}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="41e85964de80d8cc0a6c45848e8d081de601ca271230f07e0abf0341e25ed7759562920cf3d13ea6f798c1a35523dd1ec560196400f51cfeb41635efdaf85669d84db0735e8d9736fa0761356f6f1da1f9d945c408ea45c8e49a9c52036c9b4db29266e6be53f8", 0x67}, {&(0x7f0000000640)="fd7d871a3f5c373e1af1bbb38cf9df661240410fd8a62d3c47fcf0a5a9dfc8", 0x1f}], 0x7, &(0x7f0000000700)=[{0x18, 0x116, 0x6, "d4f6f45c5af0"}], 0x18}, 0x84368262deaac215) setsockopt(r7, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r7) getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet(0x2, 0x3, 0x2) r8 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xceb, 0x40000) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000180), 0x2) 00:25:10 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) 00:25:10 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/40) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174779f115a63a26e1ec988699f8bc2099eacc296ea", 0xd2, 0x10000}], 0x0, 0x0) [ 370.810763] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00920efd9a devid 10863435045939612575 transid 17050532955254037791 /dev/loop0 [ 370.841875] BTRFS error (device loop0): unsupported checksum algorithm 7790 [ 370.849575] BTRFS error (device loop0): superblock checksum mismatch [ 370.890225] BTRFS error (device loop0): open_ctree failed [ 370.903392] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.940340] audit: type=1800 audit(1569630310.503:128): pid=21025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=36 res=0 00:25:10 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x237be65df323cb8c, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c9, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000340)=r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r7, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r8 = socket(0x10, 0x804, 0x81) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f00000002c0)={{0x7, 0x40, 0x0, 0x3, 0x3f, 0xfc}, 0x7fffffff}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r9, r7) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1f3b28bd7000fe090000000000000000020005000000000000000c00050000000000000000000c00080007000000000000000c0003000400490000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 371.008737] BTRFS error (device loop0): unsupported checksum algorithm 7790 [ 371.027310] BTRFS error (device loop0): superblock checksum mismatch 00:25:10 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) socket(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) 00:25:10 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000000)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000380)={0x1, 'bridge_slave_0\x00'}, 0x18) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e1e, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x3bd, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x7, &(0x7f00000003c0)="11dca5055e0bcfe47bf070") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r3) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000540)={{0x2, 0x0, @descriptor="c32d79901372083b"}, 0x92, [], "1ae7d62252d029a9b5341c3c530fe4de0928650b9baa94c66b98198401e6848c0b29db9879b98b6302abe872588ba813340f134514881239d8aadec333842f4832aa38bd6bb1946c49069d1e033fa16341c51dc9ca6c21ec812e71e4960f33974cb42b077a2c98ce79f7f4739774e01a8a83a60dba6d5cd059711b993fe2687ffe69671d0b2d7fd6a6cce9041888eb795b93"}) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0xfffffffffffffcfb, &(0x7f0000000200)=[{&(0x7f0000000100)="8cb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f68cd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce373751008f2fe11265fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000000000", 0xbc}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0x28c}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="6704848d55e654ad6f06f85d5c8caed968361a080c9a53252ca10c8e9f2257b4300eccf6f7e8f49e10382d24c8e304851ba9f674097b80c63dc396090a3762753a1400aba6fc2b7dcec89c4c03bb4f4a995e7f0d40", 0x55}], 0x1}}], 0x3, 0x40000) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 00:25:10 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 371.151732] BTRFS error (device loop0): open_ctree failed 00:25:10 executing program 0: clock_gettime(0x2000000000000006, &(0x7f0000000300)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x10000000020) inotify_init1(0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) dup2(r2, r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r4, 0x200003) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x57) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff69) r6 = dup(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0xd84161b7992131a) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r8 = dup(r7) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x12000, 0x0) write$cgroup_type(r9, &(0x7f0000000100)='\x03\x00\x00\x00\xa2M\xb1\xa9\x00', 0xffffff5f) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x1}}, 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0x163) 00:25:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x100000000, 0x7, 0x12000, 0x0, 0x774}}) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa5c, 0x0, 0x0, 0x0, 0x1f6, 0xfff, 0x7, 0x5, 0x0, 0x5, 0x2, 0x0, 0x5, 0x0, 0x0, 0x400, 0x0, 0x2, 0x2, 0x9, 0x400, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0x100000000}, 0x0, 0x5e, 0xeb67, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x4200) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200e80, 0x14) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0x0, 0x0) alarm(0x6) r5 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x5, 0x100) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f00000001c0)) fanotify_mark(r4, 0x0, 0x0, r3, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a3ce226d586bf90a52bee8fcc8c3acd5cb113fadca3758d612ca43ba496b1e7772f10dc1a2a5651467a657588cdd60b93c759fd72a0f1e3e4f00b70d26c1388f61372b4cad82779937cc4733ec1ed1f1e3be5d815beedde3496d71099b3188f62763267114ecc3f5c3907ae55e7fca6c1c9342eca4675836f2313c550fd5f7869fa379a4c70d1a8a369db91b7ae7713ea7752eae4c459cfc494d4ef81aa1ad0f20bbdc96c26d42051704f397f3755d415b37738a52f854f69021f61daeb67c24cabd1edfe73e3562e981e9ccf7f21f6b852ccbedb9a12b2e06885d8b7d57258169ce50d10f785e958ce5b96af32b203e56b52a7531e38267fa6a6576cfec3c39ff260aa117752f397f5225f55eb2c495a83495d3a79f74373942c00b731fc8f57eeae8330caec0edb78aa4cba60eb5ba0630b95f49a6f2dc03fc9bbdf74802a3fa707c7113abcb51e4cee937c68c31b62dac9e61ae549d2df2bd4d0a9dfadc9cbb5428c00a4376f"], 0x153) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl(r4, 0x10001, &(0x7f00000003c0)="01227480999f105b9dc0865f3d7cdbe821e3ad5a7bfc0ef7d121c90a3f21b28623d9722b6baedba7e0654fb154285de010c18437828e13ad9fb6fa2e8e4a78695feb4d4304a23fe064") ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x65}}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) [ 371.272801] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:10 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) 00:25:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4008c0, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e24, 0x2, @rand_addr="00628ae8e026e4df076dc9bcb7f5b7c0", 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="9a1124ed4c3a34eb15be0a315b57adc6f02859f3816b65575c6ea5f34fe8eba3902a634418b7d91c4bf404e078e8011fc70ec3117ebc24", 0x37}, {&(0x7f00000001c0)="f646b27708fbd5b826af50f684829f883793fdc7669f6c72f38f58aa432efa11c95f09e6894df280b1884931af3bfd1833127ad5cf5508477f6f3ddc107a5c5b6373ef24ec6daeac1f09be1117349ed01a237713cbf050c733e0b759a864a045d15c3e7d0ccdc305a09357c8a46efa85af963dd10baeedf0e1bdad1026a53bbda37dbbc30268f73f3fde9d0e4104d7d77ef3223cf6e0b0b20917b42b2a8d644107b5a395e8e7b8f839b52dcdf71a1abbadc0cf9fb2583167efa646044503dddc3950dba77e439d10725d0653a0248c9afdf4330d2d4e18990655e7580505623f62cdbc724b", 0xe5}, {&(0x7f00000002c0)="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", 0xfb}], 0x3}, 0x20000000) 00:25:11 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:11 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 371.440109] net_ratelimit: 20 callbacks suppressed [ 371.440113] protocol 88fb is buggy, dev hsr_slave_0 [ 371.450222] protocol 88fb is buggy, dev hsr_slave_1 [ 371.574910] IPVS: ftp: loaded support on port[0] = 21 00:25:11 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r5, &(0x7f0000000600)='4', 0x4100) [ 371.668979] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:11 executing program 0: r0 = epoll_create1(0x0) flock(0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280)) socket(0x11, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000580)={0x4, 0x70, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x1b7, 0x3, 0x3, 0x7fff, 0x1, 0x4355, 0x6, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x143, 0x0, 0x1, 0x5, 0xffffffffffffff96, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x5, @perf_bp, 0x0, 0x9, 0x3, 0x9, 0x0, 0x7, 0x5de}, 0x0, 0x6, r4, 0xb) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r7 = dup(r6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c9, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2d, 'rdma'}]}, 0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x7fffffff) write$P9_RMKDIR(r8, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x0, 0x5}}, 0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10811, r2, 0x0) ioctl(r1, 0x400001000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 00:25:11 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:11 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) socket(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r4, &(0x7f0000000600)='4', 0x4100) [ 371.913055] IPVS: ftp: loaded support on port[0] = 21 [ 371.997576] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.010141] protocol 88fb is buggy, dev hsr_slave_0 [ 372.015246] protocol 88fb is buggy, dev hsr_slave_1 [ 372.020401] protocol 88fb is buggy, dev hsr_slave_0 [ 372.025474] protocol 88fb is buggy, dev hsr_slave_1 [ 372.037624] kauditd_printk_skb: 3 callbacks suppressed 00:25:11 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r4, &(0x7f0000000600)='4', 0x4100) [ 372.037632] audit: type=1800 audit(1569630311.603:132): pid=21123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=40 res=0 00:25:11 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:11 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(0xffffffffffffffff, r0, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) 00:25:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 00:25:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x16}]}) [ 372.188264] audit: type=1400 audit(1569630311.753:133): avc: denied { map } for pid=21112 comm="syz-executor.0" path="socket:[82869]" dev="sockfs" ino=82869 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=udp_socket permissive=1 00:25:11 executing program 1: epoll_create1(0x88e58bbdabf59502) syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 372.343143] audit: type=1800 audit(1569630311.853:134): pid=21135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=41 res=0 [ 372.560228] protocol 88fb is buggy, dev hsr_slave_0 [ 372.565745] protocol 88fb is buggy, dev hsr_slave_1 [ 372.643038] audit: type=1800 audit(1569630312.213:135): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=42 res=0 00:25:12 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(0xffffffffffffffff, r0, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) 00:25:12 executing program 1: epoll_create1(0x88e58bbdabf59502) syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 372.716783] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:12 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in=@broadcast, @in=@empty, 0x4e21, 0xfffd, 0x4e21, 0x0, 0x336b26a183deb644, 0x80, 0x0, 0x88, r4, 0xee01}, {0x8000, 0x8000, 0x6, 0x7632, 0x8001, 0x9, 0x401, 0x9}, {0x1, 0x5, 0x80}, 0x200, 0x6e6bbb, 0x2, 0x1, 0x6, 0x1}, {{@in=@loopback, 0x4d6, 0x2ac287b5496da0d3}, 0x2, @in6=@ipv4={[], [], @multicast2}, 0x3507, 0x0, 0x2, 0x3f, 0x101, 0x10001, 0x5}}, 0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r5, &(0x7f0000001300), 0x0, 0x10000000) write$vhci(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000540)) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') [ 372.880132] protocol 88fb is buggy, dev hsr_slave_0 [ 372.885297] protocol 88fb is buggy, dev hsr_slave_1 00:25:12 executing program 5: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=""/246) r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(0xffffffffffffffff, r0, 0x0, 0x102002700) r1 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r5, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r1, 0x0, 0x5, 0x3}}}, 0x90) [ 373.000374] audit: type=1800 audit(1569630312.563:136): pid=21183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=43 res=0 00:25:12 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:12 executing program 1: epoll_create1(0x88e58bbdabf59502) syz_open_dev$binder(&(0x7f0000000040)='/dev/bilder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:12 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ptrace$cont(0x9, r0, 0x9, 0xfff) syz_read_part_table(0x0, 0x1, &(0x7f0000001840)=[{&(0x7f0000000500)="ce34897118958d5d357648e828593a01bb66b8a087b4ed7ee7870517266d0b78cb0090659a63f76139423c83272af5af634386b7250a709f2002d24f5cc7aedd7a12b4dfe179a1ef3ad559bb5219f120c9b21cd7705e719fbebceb62e988b7f4728ef8f54aa376cb0e5ff9c96a7ac2ab322e82373a016f81c6ab691578d9509067127f34d84296ac50e4ede92a16720254e0bd7a14945147a103e2a85f14015cc801385936ce5b6fb2d79d5ba12df631c0572d9cb3f3e3cfe9650c3e6392d05b61ad722030ac5137698ea2d2c7167995c5e339e23e58952c16abbc1c7f6e56e95a9d71fe9a5386ae5c5a73d5346f3d34a43b3ce47e151ece623e5ed7c2b237edd12eaf02fb263dbc87b40b47c95d618e58b021ef11cd18d8f7e5323b93ba7aeb8678b763440c8d5227598ec45b45942fd5e835ed338a03c9c47dae7bac8149eef6ee2011014a0e2ee1ade3354845eec24cc3d5ede3cdf3f259ffaadce864ea70f482020dc9974641507d434c0793b1fb3d672acf0fb7bb410da9659ab89bfbdf0d27c29c87fd0edc607a430ec2fd6c404e57484fbc71d6c489378c3c291c9b08b46361194128e7ab0915d08d2702ec2ca63462a1fed4394269462a0b189409ff804322a49312b9b731793116a76c76ef88f990a91a5ef5cec41cca1a3f8b072c0974b2a216682860e72a68cb811b27b2581d8df332a9afe82b82b7d6336763ef2ffedbae6ce92f2491584aef3bd22126cdf98a02a2a7817300a811bf2c5e39cb54993bb7ede517d67f6483eac444ba04d503d9f04fa041adb001126a7b531162e91896502a8bcb54cf6c7746d726fd313fd2e35720a509f026a708eb8c22abbdf6d634ed82712a2969a1e7d3352266a6d6ac228ac2b6152dc9569469ba120b7cfccecdc4330718f4844a2c8cc4ad4b5f2394dfe7a6f79d2edf32c9a0d671dbe75302362ac95e60119ae3f3df561b3c64bbd13ad178b3c7a668f577ba15dff65ebb9f2aac44749f47a2620f9585db3f3c2d037a5ca6029480639a8faaeff8fcdd01082d68ecb00a46b2b106f431b28e5b0dc6eec73767b0c964c9d3c8e08377f0b39177c3c28e1861c0c9dd59032a9923465c9a8fa250b818899d97ae810c2e82d44019baaef4dfea01a27bd8d6a6f3feaf8e7c7a1083122d813c8102591b2e15a246017444d64e9e0724d746dab887b69e26fd1566495a2e932d433af80e13cf60eed4de7e5d6290a532eed248edb1036d18c545bb9b49220f9cdd7a8db00eec1f8d1067964f093d87581af0af4f42e16532bb014e37d0dd7232c5d90d0e9b414d43a5e032b5267edcc36812e5c53328aa29f01af7bc51b91045c0db44418b30e7bdde0468bef51823ab427f4ec7db34c5e66f3963ffb5adf107fcc83081ba4d63f09f025ab4def4fba7a952a85c394b354a58ead9c275947e3fee2f11ccbb42be6ee02fef1f13b9df3557fbcbccaf1e2415337597fbd181a7ead4f5ed0d29196768012da15c07ea91bbb43f1af7fbb77b65ea3318a4c2a307cbbdbb63ded2fd72613193e238e4f958ea07021e80cd87322f3a341df3be7a20befb0aad3da8b7b47ad46afe956deb87de1d7f0c1935e1c8eaf17786ffd16239b6f21b3081b9059da9cfb32bd371c9879287a1bf48b5e4f0f87e5f07d7fcb93f99c29644c1b22cf9fc82e68c1a8ca049e9789cff0b40db14319ac6853ba64c26e4aef43591822afedf17728b22e5ba5bf718f6feaae761dd0a47a0ba7eecbe6eb815fc925a44d70392aaa2407cf43af71e93c1767ce0dde142d846faf7e3bd26c54780c383438d4e6b7521493ad31078711e454a4d317613f94058e2b7c57caf57ef6ddac22b6bbe4fc178e9364373e3b77f59d02d49571de2c5a72f36dd6b842166a33717d5fdc0a9cdd7e423eb75540dc0ee6df139e0c3602968fb920248c32cb2e88596718019a9f3fdc235557e43fd18fe344661ee144f0977bab7aef7891e8c9e8c3a9b0a22e1a5a06b65ead305b48ec8c1247f68941923e0363e00f3050895e0bcee5e572bf26dc236567604de16df9c4fcb775052f711e930e7481fcd8c2371ab13daa0cae8101824e8cc4b7f14b6f6e1e695f042c425d30ed444f4573972a6a60c9606efed71deefc3bb731689a8c54cd53ba909be94f9d91059666cbcf7a1d011be2e2087220afb2076c0818ed72d45f7aceeb63e856dde9af4e356384d6286d67e1834f1fda917d7cfe927f1d73d34b5f6f1512d8825789fe4347ae080b0db8a7bac47bce51f5b0e2ad8122e730e0070620a481894a7995ab769b4433dd1bb2933f84ea38f19870e4ce27d1b277eb535b596964c1e8af894b7fd6917f3050b5e60c857157dabd3c2a13fb23d5ea79688f2176f0d14be452d08f29ec26ff2a69421f2cac5ad06181a3759dd0c0ab4618a75908765268bb5f5d096c3d9218ddaf7832cca27610f7e9ed2d0fdea0c308ae1f5a28bbc5f9618f54a05027130e7779aeb3299127751a6809dcb87deda31ef5bf086ff6d4d79b5ec7dfa0cd920ec86fe0135a58ca5201365b1a250e559f7ac10edd25fbb4da846a16d9ca42f820cbec822aacecdb1108fc4554fdb6e2e4b0c6e385c227c91b82703963ea13dee6a97788df984fcd0c8a26cd9db530ea2f62dbb685cee1f02df173fcb519d59ae379243fdb076bd3adde26d6a2fdbd388881fec9f47f28efc72d04d8afb396d880140e0a173e558c408c13c079bb4e971c33355b57dab1dbcace1b12d266118e195be6c85b2c03ce4f9e130a35dff5fb1dde3e074e552f32da8981b63fb8590f5904ad20b8e3a7b62e9c00a741394dbd855d33be6977bd49e1cc62c955cef8989986a26eb1783315dcafc02c84fba913af10cf703804cbdf2ae8fa773a3d31dbe97204db31b786d2f84cf2cf05b11ec756fb8fd4e542cb675d5075c857e2f7356050b87b1b8ba6fd3719012edecb15b2564f253b9646ef3a0bfe5d4b9ac884d15d458a375274a935a817ce377acc84a023a3fd22296b818f6aad9fbd346984baf7208ecea88e3112afe008dff4cdf7586f32f3e32b4eefb2a1877d651c06829360f5e9e05d438ef37134aa037b2ed10aabdb737d1f3a16d7e3ca7a671827b359a4c4eae01fd3a903c18bb0b894054d427e2062177cdca55e47d53999a58a03d306c0617d9c388e20cb5b6e5fde016ac0eaac6ff68a1db59065b7e7808dd2b87e0e4b434043eacf88072de686c489a4d3120205c3e5a2498efa2f805f467122983e1862ee9cd45f9c30bc9c70050afded1202295de3b819ff8e579a0c2b335327950663c29197b8ec6f373da2c82693ca3e1e7002a3d741a06eb66da18ef5ee1439dfede855377e645473f839f408a637f0430482a7595970d106df9dd8385e83789384107c7225d390a108a9e232cf2425c82f5be494331b9709f6d29a47c628145bc51e900829f0cbadccd252c2f9674437d97fa2751caa85f16e0dfd9f0db7b4135443156ef723620a98081c4901d2bc708b60bf01c3d705357875d279a020bb92504d1ed8b0432c6ebbdc9762c29c55059a65ecb518555dd0341e1364d9fae4e8a67734ef9a062c8988513bcc69c4b143969b1b05b69a561230c8ecd617be3ef8ca60eff970891d1d39c62f4c6c30767c1fa133cc073a15c262cc386e1a56f1cf22d2419b6e489b9f0edb4568e0d884d8c4dd3a5ee1aaa8c2009371c0cf3d40e08d218ae6ed1e402ee2f2ad28098d34f95025ed2106995d5eeb226735e49fb9f52e464a3e2c51bdc3c5e55ef70fb57f0878795347e983340669509ce9783f74de434ad79b917a249828d5adaffa2c7749875b657f4235ff18e9579ae7a456bcde6f2bf44bbab4c24428d8da723f315ba1457dbe96ee51c101b7cc71a0f409033b3f23fef01473b70e057d43c9c21f63bf758b9c0e9b51daa9c3c7e319f623824ee5e7a97bb89989f7d3af4ce47f85c66855c5b14bb77dd096e09088ff260e99ac23a67ec419781606dad4ce2a2885de9110473d9547c86e46a6ef40332f7300d7f9bbd9c1ecd295841230cda33ef4f351c5bceff72bc3f0731f8cadfde6ff23c81918b809d6e8c88f48d51d1693d13f56b472d3d465d74dd07e3973cfc0479597d7ecfa4ccd3745e9cee03d65130691e35301fe542daaa947dff118a21ea4cbe2cb0a110c2448ca71b9317730a3a65df4e0e712194bf0309249a7cb8bb423fc6531ec82d3e396a9e752ed60412fa4a9b16106754dcc8bcb91e201113905b7c4efb1c1ffe47a7ef2d9aba9ff30c529d1228723c8320bab7dbde0afb509f1e66b28ce0583b60f570fa77c269aec814a5b6bce986cb6163e9af805d13e4a9c23a92aab6b34a86f298868af0ce99ac1d28f150ce2a8329b1ebd9e7cad4e7e5ae4183eee2f1fede864371a234e4202cf84889b3de660f2173ab2c9a225a5a79e13eda9d8fa9c8a0d484d78d44b5917c29832ba63341e6e943d0b094835ab24d4c2da09b7a46c546d82f47796ad75e00036b3b5490ba90186d309a8a6074e57bc04c5c4b5949d6c9cb939b823155a098aa37d80c00568f2a6cd1acb152af2466df496db166bcdff379c2f1384f6dfd518f92d5c8b2f1d896d30e58519ba2354d0e999c7f7ab34a1af8a5f918730f820fe84c03d590519d967be856c2a489367604a08147d6ecf59bc2043a6838e4fbf26693ff2842384c5ebfe7ff90f171e3f333e18ca87b2e4177ad882b3d0e0537d7be7d4eea85a02130a302b403510addda3d50dbe490bd2ccb6422cc30bc077108dbe939dca7a3dab4fc31e0ae21668383651c36e82e752299ba1328678ef1a252d647c437f8a465407ddef3e195d3a7f265c346660d1f827e6ba33d5de165fd3bab363ea40f549b42ccbd99b56e6d0a553010ead6112cd95d41c672be973aa7d4caf669b71a59bc9309d2c4934d11340f8ae7b96a9780f3feb7f5c639032319617ad4b5b5dfa3033d6756cad4cf8b6901cae80f539756bdac0b31ab465471f365b72ccfcc9f60f624c48d22f829fe316c5ba778b476a113e1222303eada179371dbe3ee90b8f880b59ecc29d5e5f1a03d322de61e", 0xdfd, 0x3}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket(0x11, 0x2, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='vru\n\xf1A\xd8.overlay.redirect\x00', &(0x7f0000000180)='\x00', 0x1, 0x2) setsockopt(r1, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r2, 0x7) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r3) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r5) close(r4) r6 = fcntl$dupfd(r3, 0x605, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/40, 0x28) [ 373.120892] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.182182] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 373.186863] loop0: partition table partially beyond EOD, truncated [ 373.212366] loop0: p1 size 2433907504 extends beyond EOD, truncated 00:25:12 executing program 5: pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 373.364972] audit: type=1800 audit(1569630312.933:137): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=44 res=0 00:25:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f336def25ccf15d10b771b0f22384d6bc344b773b36d2108e8f7e1b2f6c6c4b970a262ae0c5a797c41c941a2b5068cf54f8d3d1bfbd67889d5e258a45d76628f144f6e191b237806a7ac5b0d4b048e4bbce6e5b331fc4c2cee3a78494eb82054fc74b436e3a3f9446bb2a5dff255854365bfbaa31800d26baeab0c55b3ee47"], 0x0, 0x80}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x20080) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x2, 0x5, 0x1ff, 0x1ff, 0x0, 0xc9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000340)) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c9, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x800, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f00000002c0)={r7}) 00:25:13 executing program 1: r0 = epoll_create1(0x88e58bbdabf59502) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r3, &(0x7f0000000600)='4', 0x4100) 00:25:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 373.456040] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:13 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x40006011, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x220e01, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x3, 0x4) madvise(&(0x7f00001c1000/0x1000)=nil, 0x1000, 0xb) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x412000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040), 0x0) fcntl$setpipe(r2, 0x407, 0x3fffffffc0000) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:25:13 executing program 5: pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:13 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:13 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 373.680386] audit: type=1800 audit(1569630313.243:138): pid=21238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=45 res=0 00:25:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000004c0)=0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x1000) unshare(0x2040400) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x77db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x3000, 0x0, 0x8, 0x40000017}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000005c0)={0x3, r1}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001d000529d50000000000000007000000", @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) [ 373.802529] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:13 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 373.897203] audit: type=1800 audit(1569630313.463:139): pid=21254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=46 res=0 [ 373.978531] bond0: Releasing backup interface bond_slave_1 [ 374.029382] device bond_slave_1 left promiscuous mode [ 374.046064] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 374.051249] loop0: partition table partially beyond EOD, truncated [ 374.078517] loop0: p1 size 2433907504 extends beyond EOD, truncated [ 374.180452] audit: type=1800 audit(1569630313.743:140): pid=21265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16737 res=0 [ 374.307153] device bond_slave_1 entered promiscuous mode [ 374.313689] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:25:13 executing program 0: socketpair(0xf7441008c528a2c2, 0x80000, 0x2, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c9, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xd4fe, 0x200) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000100)=r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r5 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007021dfffd946f6105000200000a1f000002002808000800040004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:25:13 executing program 5: pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:13 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x0, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:13 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000004c0)=0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x1000) unshare(0x2040400) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x77db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x3000, 0x0, 0x8, 0x40000017}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000005c0)={0x3, r1}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001d000529d50000000000000007000000", @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) [ 374.474333] audit: type=1800 audit(1569630314.043:141): pid=21290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=47 res=0 00:25:14 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 374.581073] bond0: Releasing backup interface bond_slave_1 [ 374.647914] device bond_slave_1 left promiscuous mode 00:25:14 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1040, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/101) socketpair(0x22, 0x2, 0x10, 0x0) 00:25:14 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 374.719483] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.755690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:25:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='/dev/input/mice\x00', &(0x7f00000000c0)='/dev/uinput\x00', &(0x7f0000000140)='/dev/input/mice\x00', &(0x7f0000000180)='syz1\x00', &(0x7f00000001c0)='syz1\x00', &(0x7f0000000200)='syz1\x00', &(0x7f0000000240)='eth0a\x00'], &(0x7f0000000980)=[&(0x7f00000002c0)='syz1\x00', &(0x7f0000000300)='syz1\x00', &(0x7f0000000340)='GPL/}\x00', &(0x7f0000000380)='/dev/uinput\x00', &(0x7f00000003c0)='syz1\x00', &(0x7f0000000880)='\'&]\x00', &(0x7f00000008c0)='/dev/input/mice\x00', &(0x7f0000000900)='/dev/input/mice\x00', &(0x7f0000000940)='/dev/uinput\x00']) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 374.767445] delete_channel: no stack [ 374.772218] delete_channel: no stack [ 374.781080] delete_channel: no stack [ 374.785208] delete_channel: no stack 00:25:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x80000000, 0x420000) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c9, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0x8000000) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 00:25:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x7f, 0x7, 0x7fff, 0x2, 0xc28fafd, 0x7ff}) 00:25:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:14 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x0, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:14 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) unshare(0x2040400) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x77db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) r1 = dup(0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e20000008d61faff0000000018140000", @ANYRES32=0x1, @ANYBLOB="000000000000000085100000000000009500000000000000182a0000", @ANYRES32=r1, @ANYBLOB="00000000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3f, 0xc2, &(0x7f0000000280)=""/194, 0x40f00, 0x0, [], r2, 0x9, r3, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4}, 0x10}, 0x70) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x40000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00!\x00\x00\x00']}}, 0x0) 00:25:14 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) [ 375.333550] device bond_slave_1 entered promiscuous mode 00:25:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 375.383090] overlayfs: filesystem on './file0' not supported as upperdir [ 375.393752] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:25:15 executing program 0: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x2) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000380)="ef64a2ee353a4fe8abe3c17e8da50cde854f5d") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) 00:25:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2fba03998cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c9cb575a0fad7e0b6f6355077e72904a4153", 0x75}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x80000000, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x648, 0xd3, 0x0, 0x2, 0x0, @broadcast}, 0x10) 00:25:15 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x0, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:15 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 00:25:15 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80684d00, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/152) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup(r1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c9, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000000)="17658cff8626ef8d82469c99af6d6ae2ba4dad411a95a51cc5dd27d13dcdfa32a2755b4274af381b664e6f699d7144b773333401c23bc967dd45251937cc8319529fd8363f9d554bec49e49bddf89ea4") 00:25:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x10001, 0x0, [], &(0x7f0000000100)=0x2b}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 00:25:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x0) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:15 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) [ 376.021958] Dev loop3: unable to read RDB block 1 [ 376.028538] loop3: unable to read partition table [ 376.045433] loop3: partition table beyond EOD, truncated [ 376.085926] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 00:25:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x0) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:15 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x0, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:16 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 00:25:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621f354e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000180)='/dev/vcs\x00', r3}, 0x30) fcntl$lock(r1, 0x6, &(0x7f0000000400)={0x2, 0x1, 0xfffffffffffff800, 0x9, r4}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x204142, 0x0) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r6) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @mcast1, @dev={0xfe, 0x80, [], 0x1b}, 0x9, 0x2, 0x1ff, 0xc00, 0x7, 0x2d0000, r7}) connect(r5, &(0x7f0000000340)=@ipx={0x4, 0x6, 0x3, "d3687ac45294", 0xbb}, 0x80) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf1c}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write(r8, &(0x7f0000000140)="8b", 0x1) 00:25:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r5) connect$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) [ 376.525538] nla_parse: 2 callbacks suppressed [ 376.525544] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:16 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x0, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x0) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:16 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) [ 376.720103] net_ratelimit: 20 callbacks suppressed [ 376.720109] protocol 88fb is buggy, dev hsr_slave_0 [ 376.730207] protocol 88fb is buggy, dev hsr_slave_1 00:25:16 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 00:25:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:16 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x0, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 377.040109] protocol 88fb is buggy, dev hsr_slave_0 [ 377.045283] protocol 88fb is buggy, dev hsr_slave_1 00:25:16 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 377.094656] kauditd_printk_skb: 14 callbacks suppressed [ 377.094663] audit: type=1800 audit(1569630316.663:156): pid=21475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=54 res=0 [ 377.211004] protocol 88fb is buggy, dev hsr_slave_0 [ 377.216409] protocol 88fb is buggy, dev hsr_slave_1 [ 377.407262] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:17 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 377.436195] audit: type=1800 audit(1569630317.003:157): pid=21487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=55 res=0 00:25:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000)='security.ima\x00', 0x0, 0x0, 0x5) splice(r0, 0x0, r1, 0x0, 0x80800, 0x0) 00:25:17 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0x0, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:17 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) setsockopt(0xffffffffffffffff, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 377.680125] protocol 88fb is buggy, dev hsr_slave_0 [ 377.685230] protocol 88fb is buggy, dev hsr_slave_1 [ 377.701596] audit: type=1800 audit(1569630317.273:158): pid=21508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=56 res=0 [ 377.802949] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:17 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:17 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0x0, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 377.904748] audit: type=1800 audit(1569630317.473:159): pid=21521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=57 res=0 [ 378.147328] audit: type=1800 audit(1569630317.713:160): pid=21539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=58 res=0 00:25:17 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 378.236463] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.250104] protocol 88fb is buggy, dev hsr_slave_0 [ 378.255226] protocol 88fb is buggy, dev hsr_slave_1 00:25:17 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0x0, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 378.463596] audit: type=1800 audit(1569630318.033:161): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=59 res=0 [ 378.620329] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:18 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e68201e347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1000000"], 0x18}}], 0x40000000000037b, 0xc000) 00:25:18 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:18 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x0, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:19 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 379.469798] audit: type=1800 audit(1569630319.033:162): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="loop1" ino=60 res=0 00:25:19 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e68201e347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1000000"], 0x18}}], 0x40000000000037b, 0xc000) [ 379.629530] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:19 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x0, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 379.734588] audit: type=1800 audit(1569630319.303:163): pid=21600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16517 res=0 00:25:19 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:19 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e68201e347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1000000"], 0x18}}], 0x40000000000037b, 0xc000) 00:25:19 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e68201e347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1000000"], 0x18}}], 0x40000000000037b, 0xc000) [ 379.975339] audit: type=1800 audit(1569630319.543:164): pid=21615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16722 res=0 00:25:19 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 380.077885] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:19 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) 00:25:19 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x0, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 380.239600] audit: type=1800 audit(1569630319.803:165): pid=21645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16532 res=0 00:25:19 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:19 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) 00:25:20 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 380.504358] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:20 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:20 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000060008000029ec2400020cd37e99d69cda45a95e", 0x33fe0}], 0x1}, 0x0) 00:25:20 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:20 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x0, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 380.924973] FAT-fs (loop1): bogus number of reserved sectors [ 380.956246] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:20 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) 00:25:20 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 381.091642] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:20 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) [ 381.260476] FAT-fs (loop1): bogus number of reserved sectors [ 381.302262] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:21 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) 00:25:21 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:21 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:21 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x0, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 381.568576] FAT-fs (loop1): bogus number of reserved sectors 00:25:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 381.608727] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:21 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:21 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 381.840384] net_ratelimit: 20 callbacks suppressed [ 381.840415] protocol 88fb is buggy, dev hsr_slave_0 [ 381.850873] protocol 88fb is buggy, dev hsr_slave_1 [ 381.888411] FAT-fs (loop1): bogus number of reserved sectors [ 381.908119] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:21 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 382.178298] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.201358] FAT-fs (loop1): bogus number of reserved sectors [ 382.219257] kauditd_printk_skb: 7 callbacks suppressed [ 382.219264] audit: type=1800 audit(1569630321.783:173): pid=21767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16577 res=0 [ 382.256250] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:21 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:21 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x0, 0x3ff, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 382.387570] FAT-fs (loop1): bogus number of reserved sectors [ 382.401337] protocol 88fb is buggy, dev hsr_slave_0 [ 382.406864] protocol 88fb is buggy, dev hsr_slave_1 [ 382.411362] FAT-fs (loop1): Can't find a valid FAT filesystem [ 382.413316] protocol 88fb is buggy, dev hsr_slave_0 [ 382.423383] protocol 88fb is buggy, dev hsr_slave_1 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 382.447273] audit: type=1800 audit(1569630322.013:174): pid=21783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16945 res=0 00:25:22 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 382.694406] FAT-fs (loop1): bogus number of reserved sectors [ 382.713374] audit: type=1800 audit(1569630322.283:175): pid=21799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16993 res=0 [ 382.726671] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:22 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) r1 = socket(0x1e, 0x1, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 382.960096] protocol 88fb is buggy, dev hsr_slave_0 [ 382.965219] protocol 88fb is buggy, dev hsr_slave_1 [ 383.015550] FAT-fs (loop1): bogus number of reserved sectors [ 383.032178] FAT-fs (loop1): Can't find a valid FAT filesystem [ 383.062810] audit: type=1800 audit(1569630322.633:176): pid=21823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16993 res=0 [ 383.096318] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:22 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:22 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x0, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) [ 383.280110] protocol 88fb is buggy, dev hsr_slave_0 [ 383.285238] protocol 88fb is buggy, dev hsr_slave_1 00:25:22 executing program 0: socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 383.381280] FAT-fs (loop1): bogus number of reserved sectors [ 383.417497] FAT-fs (loop1): Can't find a valid FAT filesystem [ 383.425807] audit: type=1800 audit(1569630322.993:177): pid=21850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16993 res=0 00:25:23 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:23 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 383.656726] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.703461] FAT-fs (loop1): bogus number of reserved sectors [ 383.724215] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:23 executing program 0: r0 = socket(0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 383.746858] audit: type=1800 audit(1569630323.313:178): pid=21868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16993 res=0 00:25:23 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:23 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x0, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 383.930842] FAT-fs (loop1): bogus number of reserved sectors [ 383.936683] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:23 executing program 0: r0 = socket(0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:23 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 383.970694] audit: type=1800 audit(1569630323.543:179): pid=21885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16549 res=0 00:25:23 executing program 0: r0 = socket(0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:23 executing program 0: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 384.156586] FAT-fs (loop1): bogus number of reserved sectors [ 384.180842] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:23 executing program 0: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:23 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 384.190666] audit: type=1800 audit(1569630323.763:180): pid=21900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16993 res=0 00:25:23 executing program 0: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:23 executing program 3: getrusage(0x1, &(0x7f00000016c0)) syz_emit_ethernet(0x102c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x509200, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x49f, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup(r3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c9, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000004c0)={0x0, @reserved}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r6, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f0000000480)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xb9}, r6}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f0000000440), r7}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r7}}, 0x18) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x2000000000000107, 0x1, &(0x7f00000000c0)="010000000000060000071a80000001cc", 0x10) close(r8) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r8, 0x111, 0x3, 0x0, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 00:25:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 384.364517] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.403061] FAT-fs (loop1): bogus number of reserved sectors 00:25:24 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x0, 0x8000}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 384.422369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 384.447824] audit: type=1800 audit(1569630324.013:181): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17217 res=0 00:25:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:24 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getresuid(0x0, &(0x7f00000001c0), 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) msgctl$IPC_SET(0x0, 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x140, 0x134) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20010212}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xec, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4003ff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000340)='security.ima\x00', 0x0, 0x0, 0x0) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 384.699992] FAT-fs (loop1): bogus number of reserved sectors [ 384.739240] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 384.747690] audit: type=1800 audit(1569630324.323:182): pid=21947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17313 res=0 00:25:24 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:24 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 00:25:24 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 384.963095] FAT-fs (loop1): bogus number of reserved sectors 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 385.003910] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:24 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) stat(0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000180)=""/79) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) dup3(r0, r1, 0x0) 00:25:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 385.218523] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.242343] FAT-fs (loop1): bogus number of reserved sectors [ 385.252182] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:24 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:25 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:25 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 385.448031] FAT-fs (loop1): bogus number of reserved sectors [ 385.455300] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:25 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:25 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:25 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 385.700094] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.711859] FAT-fs (loop1): bogus number of reserved sectors [ 385.717841] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:25 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000c80), 0x4924924924921ae, 0x0) 00:25:25 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:25 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:25 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) 00:25:25 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r8, r10}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff}}, 0xe8) r11 = dup(r4) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c9, 0x0) r12 = getegid() setfsgid(r12) write$FUSE_ENTRY(r11, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r12, 0x5, 0x3}}}, 0x90) 00:25:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) io_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 386.122761] FAT-fs (loop1): invalid media value (0x00) [ 386.133244] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:25 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) io_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 386.569901] FAT-fs (loop1): invalid media value (0x00) 00:25:26 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 386.593723] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) io_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:25:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:26 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 386.975989] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, 0x0, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) r9 = getegid() setfsgid(r9) [ 387.120168] net_ratelimit: 20 callbacks suppressed [ 387.120174] protocol 88fb is buggy, dev hsr_slave_0 [ 387.130238] protocol 88fb is buggy, dev hsr_slave_1 00:25:26 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) r11 = getegid() setfsgid(r11) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r11, 0x5, 0x3}}}, 0x90) [ 387.258043] FAT-fs (loop1): invalid media value (0x00) 00:25:26 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x1ec, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000380)=""/189, 0xfffffffffffffd14}}], 0x246, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:26 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000054e000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000380)="0f20e02e410f38caf30f22b8010000000f01d9c441fa1601c4a26991648a05c4c3bd7d380d0f20c035040000000f22c0b805000000b99e00000025587f01d901d9c1000f00d8c4c109d94f20c423790551e90d0b", 0x51}], 0x0, 0x8, &(0x7f00000002c0), 0x1) creat(&(0x7f0000002440)='./file0\x00', 0x0) r3 = creat(&(0x7f0000002440)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x10001) openat$zero(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x72439a6b) sendto$packet(r4, &(0x7f0000000180)="e7dc6e3b38d8e20a65497da3b32edcbf38cd86bf61aa0ad7ddc70fc986dd3e11c02d11f09f0b543d0b8bf8af1b1fbb86b7aa2212f4e82276d8177db62c69030f5dcf08cf0a10ba8cb7f67c50a62942bdc8536cf6350d5da8f73c2ba1ef967d5102002a2c03192b3099882662bf6e0ee1d8cacb9d86937cec687fc90c0cca8591c02a1bca4c25b0768fc2c0af03fdc205e67b2e1d508419818553068eaa08c5559ba33b6dde2a1fb60c1be40480e05812ab815e", 0xb3, 0x40, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x4404) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@uid={'uid', 0x3d, r6}}]}) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, r6, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10001) [ 387.396714] FAT-fs (loop1): Can't find a valid FAT filesystem [ 387.440118] protocol 88fb is buggy, dev hsr_slave_0 [ 387.445241] protocol 88fb is buggy, dev hsr_slave_1 00:25:27 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 387.540352] hfsplus: unable to find HFS+ superblock 00:25:27 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 387.600118] protocol 88fb is buggy, dev hsr_slave_0 [ 387.605214] protocol 88fb is buggy, dev hsr_slave_1 [ 387.605864] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 387.645826] FAT-fs (loop1): invalid media value (0x00) [ 387.654918] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, 0x0, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) r9 = getegid() setfsgid(r9) [ 387.714767] kauditd_printk_skb: 6 callbacks suppressed [ 387.714775] audit: type=1800 audit(1569630327.283:189): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17360 res=0 00:25:27 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 387.798875] hfsplus: unable to find HFS+ superblock 00:25:27 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r1}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) 00:25:27 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 388.028206] FAT-fs (loop1): invalid media value (0x00) [ 388.037808] FAT-fs (loop1): Can't find a valid FAT filesystem [ 388.039520] audit: type=1800 audit(1569630327.603:190): pid=22167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16961 res=0 00:25:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:27 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) r11 = getegid() setfsgid(r11) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r11, 0x5, 0x3}}}, 0x90) 00:25:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, 0x0, r7}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r8 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c9, 0x0) r9 = getegid() setfsgid(r9) [ 388.080119] protocol 88fb is buggy, dev hsr_slave_0 [ 388.085230] protocol 88fb is buggy, dev hsr_slave_1 00:25:27 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) 00:25:27 executing program 3: r0 = timerfd_create(0x8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 00:25:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) semop(0x0, &(0x7f0000000100)=[{}], 0x1ae) [ 388.354479] FAT-fs (loop1): invalid media value (0x00) 00:25:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendfile(r0, r1, 0x0, 0x102002700) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) r10 = getegid() setfsgid(r10) [ 388.393349] audit: type=1800 audit(1569630327.963:191): pid=22196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17358 res=0 [ 388.416704] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:28 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) write(r2, &(0x7f0000000600)='4', 0x4100) [ 388.505829] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.650124] protocol 88fb is buggy, dev hsr_slave_0 [ 388.655242] protocol 88fb is buggy, dev hsr_slave_1 00:25:28 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000005c40), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 00:25:28 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:25:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) [ 388.868201] FAT-fs (loop1): invalid media value (0x00) [ 388.875986] FAT-fs (loop1): Can't find a valid FAT filesystem 00:25:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r6, r8}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r9 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c9, 0x0) setfsgid(0x0) write$FUSE_ENTRY(r9, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, 0x0, 0x5, 0x3}}}, 0x90) 00:25:28 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x7) sendfile(r0, r1, 0x0, 0x102002700) r2 = getuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000740)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x8}}]}, 0x74}}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@rand_addr="f08e2a81621663b067e47a21af332a9c", 0x4e20, 0x0, 0x4e21, 0x60, 0x2, 0x1d0, 0x20, 0x73, r7, r9}, {0x40, 0x9, 0x12, 0xa7b2, 0x81, 0x3, 0x0, 0x2}, {0x8, 0x6, 0xc9d, 0x3}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0xfd20579527765687}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d3, 0x33}, 0x2, @in6=@ipv4={[], [], @remote}, 0x3505, 0xdcf1a5b4cadf9fca, 0x0, 0x51, 0x3ff, 0x3ff, 0x8000}}, 0xe8) r10 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c9, 0x0) r11 = getegid() setfsgid(r11) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x7, {0x5, 0x2, 0xfff, 0x967, 0x7, 0xfffff800, {0x4, 0x1, 0x0, 0x8000, 0x1f, 0x1000, 0x81, 0x8, 0x1, 0x988, 0x53, r2, r11, 0x5, 0x3}}}, 0x90) [ 388.942587] audit: type=1800 audit(1569630328.513:192): pid=22227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17355 res=0 [ 388.994956] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: tipc_subscrp_timeout+0x0/0x280 [ 389.006641] ------------[ cut here ]------------ [ 389.007074] kobject: 'loop4' (ffff8880a49dc9a0): kobject_uevent_env [ 389.011398] WARNING: CPU: 1 PID: 5 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 389.011408] Kernel panic - not syncing: panic_on_warn set ... [ 389.011408] [ 389.011416] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.146 #0 [ 389.011420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.011432] Workqueue: tipc_send tipc_send_work [ 389.028557] kobject: 'loop4' (ffff8880a49dc9a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 389.033918] Call Trace: [ 389.033935] dump_stack+0x138/0x197 [ 389.033947] panic+0x1f2/0x426 [ 389.033955] ? add_taint.cold+0x16/0x16 [ 389.033966] ? debug_print_object.cold+0xa7/0xdb [ 389.033976] ? debug_print_object.cold+0xa7/0xdb [ 389.033985] __warn.cold+0x2f/0x36 [ 389.069170] kobject: 'veth126' (ffff888095e14cb0): kobject_uevent_env [ 389.070297] ? ist_end_non_atomic+0x10/0x10 [ 389.070309] ? debug_print_object.cold+0xa7/0xdb [ 389.070320] report_bug+0x216/0x254 [ 389.070330] do_error_trap+0x1bb/0x310 [ 389.070339] ? math_error+0x360/0x360 [ 389.070352] ? vprintk_emit+0x171/0x600 [ 389.070364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.070375] do_invalid_op+0x1b/0x20 [ 389.075430] kobject: 'veth126' (ffff888095e14cb0): fill_kobj_path: path = '/devices/virtual/net/veth126' [ 389.077527] invalid_op+0x1b/0x40 [ 389.077536] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 389.077541] RSP: 0018:ffff8880a9cd79d8 EFLAGS: 00010286 [ 389.077549] RAX: 000000000000006f RBX: 0000000000000005 RCX: 0000000000000000 [ 389.077554] RDX: 0000000000000000 RSI: ffffffff866d10e0 RDI: ffffed101539af31 [ 389.077559] RBP: ffff8880a9cd7a00 R08: 000000000000006f R09: ffff8880a9cc2a30 [ 389.077563] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff866cc2e0 [ 389.077568] R13: ffffffff85e6b790 R14: 0000000000000000 R15: ffff888097daa918 [ 389.077577] ? tipc_subscrb_rcv_cb+0xa80/0xa80 [ 389.077592] ? debug_print_object.cold+0xa7/0xdb [ 389.090714] kobject: 'loop0' (ffff88809333e2a0): kobject_uevent_env [ 389.097177] debug_object_assert_init+0x22f/0x300 [ 389.097188] ? debug_object_init_on_stack+0x20/0x20 [ 389.097207] del_timer+0x67/0xf0 [ 389.097215] ? trigger_dyntick_cpu.isra.0+0x190/0x190 [ 389.097228] tipc_subscrb_subscrp_delete+0x16a/0x3a0 [ 389.107449] kobject: 'queues' (ffff8880629b1f48): kobject_add_internal: parent: 'veth126', set: '' [ 389.109898] ? trace_hardirqs_on_caller+0x400/0x590 [ 389.109908] ? tipc_subscrb_subscrp_delete+0x3a0/0x3a0 [ 389.109917] tipc_subscrb_release_cb+0x18/0x30 [ 389.109927] tipc_close_conn+0x176/0x210 [ 389.109938] tipc_send_work+0x470/0x5a0 [ 389.109952] ? tipc_close_conn+0x210/0x210 [ 389.109966] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 389.109979] process_one_work+0x863/0x1600 [ 389.118150] kobject: 'queues' (ffff8880629b1f48): kobject_uevent_env [ 389.121598] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 389.121615] worker_thread+0x5d9/0x1050 [ 389.121634] kthread+0x319/0x430 [ 389.121643] ? process_one_work+0x1600/0x1600 [ 389.121649] ? kthread_create_on_node+0xd0/0xd0 [ 389.121660] ret_from_fork+0x24/0x30 [ 389.127920] Kernel Offset: disabled [ 389.312468] Rebooting in 86400 seconds..