0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x81d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:56 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000298e1584", 0x12, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:56 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1277.897818][   T26] audit: type=1804 audit(1568484356.140:3889): pid=25224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1364/file0" dev="sda1" ino=16529 res=1
18:05:56 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001900010000000000000000001d010000080009003d33acff98280c097a6474a097a4f29c2df983e9ea40d85aacf2040e7f511914d81758e5f6ec051fb67b021291a30c09417803a443d94bc12ad0b8dbc2626865c8ff1f8bf387c3695bf637cae0422ce0fe636842258346642df43f637570ec21fcae1599aeb6e5357f17901c7a55f7a9157ba705a503c19413d6163fbe249b4103c6309518d83f78f6b56f6402075dc503b24d8365371862eac4d5ac6b09d58f7c5ec593bd70", @ANYRES32=0x0], 0x1c}}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="fd4e0d67db70bfa4895abf9fb6e334e06564b6739ae48d3ebeb1c8695f27ceba715e9fd9dda130ba7fe552e8c3b3f738b7ecd17ebef5f5ac37d028235c4d18f95e7e5b204279c1cf203e603a7dedcac36b8a91b1c88418cc01a058cbaca5316232e665014ff898de06fc807ec9a8f101959efdb3a2fa47bc57876acd3b227e6040a7073ee91de204f68a38ef9f42781d66e4d7516d473ed0ed63fa2ddeba8e72a9eace13d89a30b95981868d01007372c2357b3839ee94e757b9bfbfe542bd97f96f4999177f7ae286e672477d2e1b4ad0a8a9b1698afa1d72f9d35c7cdb", 0xde, 0x8001, 0x0, 0x46)
socket$vsock_dgram(0x28, 0x2, 0x0)

[ 1277.986900][   T26] audit: type=1804 audit(1568484356.160:3890): pid=25206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1364/file0" dev="sda1" ino=16529 res=1
18:05:56 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/hci\x00')
write$P9_RFSYNC(r1, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:56 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x81e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:56 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000488e1584", 0x12, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1278.274481][   T26] audit: type=1804 audit(1568484356.520:3891): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1093/file0" dev="sda1" ino=16564 res=1
18:05:56 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000400)={0x0, @bt={0x4, 0x1, 0x1, 0x0, 0x9a7, 0x6, 0x3, 0xfffffffeffffffff, 0x7f, 0x5, 0x1, 0x4, 0x3, 0x9, 0x0, 0x11}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x3, [@var={0x10, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x4790}, {0x5, 0x401}, {0xd, 0x10001}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x10}]}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], 'H'}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x71]}}, &(0x7f0000000240)=""/247, 0x8b, 0xf7}, 0x20)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140))
fchown(r1, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)={0xfffffffffffffff9, 0x7fffffff, 0xf, 0x0, 0x2, [{0x0, 0x6e80, 0x4, 0x0, 0x0, 0x804}, {0x100000001, 0x9, 0x800, 0x0, 0x0, 0x2000}]})

18:05:56 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffffffffffff}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:56 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r4, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000003c0))
r5 = getpid()
fcntl$lock(r3, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r5})
ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000380)={@remote, <r6=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r4, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r6, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r6}, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
r8 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r7, r8)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:56 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x81f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x280, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vcan0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

18:05:56 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000498e1584", 0x12, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:56 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000608e1584", 0x12, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:56 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:56 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x820, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:57 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000140)={0x1, {0x2, 0x620, 0x9}})

18:05:57 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="e63a2a0062d8b7c5168e3601b6bcb8f1331452384740ba15", 0x18, 0x731}, {&(0x7f0000000240)="de5d3c3db18b58508b210ea299ae08b7df717ede1b7a6fffb1490fb575782f4abab3397f60c87f35d2f90bf08656407eb481a44f4347358405628a2e2872e477c2e42828729d3451989b15bb154c5a680dfdc7c2b4bd6a50b0bb99ca36222095380880652ae032188119de5829c9e3cc7b1c7617c208ab1d0d44a7fb40730668aabb14e0da04c69add2f2df98be7f8fa56fef4d1859247a903e3efd4101f41dccb0a7a06f2ac6b58f0045fc7e53ed828b4cec08b8afc0511b2566d363fea5cae5782ba0a3e18b92feefe66aebcf5", 0xce, 0xf61f}, {&(0x7f0000000340)="7c580b044cc513c6785f72ca49488dc7e2a1e4b3d0553bc461e3feae324b502014f4e11d88adb4401681ced45046272dfa7647b2a5b318c7a01443bc78d9e5f2c4d66e5e3b67f38c9e02da8c3dcaf304b7826a081a9047e03fe7f23aa863e7e483f6e06e66f642725a09a984443e190d1a5b0a6038952c81a71eb5968c", 0x7d, 0x3}], 0x800, 0x0)

18:05:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b0000000000ff1584", 0x12, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:57 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:57 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x821, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1279.079013][   T26] audit: type=1804 audit(1568484357.330:3892): pid=25321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1367/file0" dev="sda1" ino=16609 res=1
18:05:57 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e15c0", 0x12, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1279.232485][   T26] audit: type=1804 audit(1568484357.350:3893): pid=25317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1367/file0" dev="sda1" ino=16609 res=1
18:05:57 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='g/capi>m\xca\x01\x00\x00\x80Jc\x00\x00\x00\x00\x00\x06\xce', 0x80, 0x0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getresgid(&(0x7f0000000300), &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000440))
fchownat(r0, &(0x7f0000000240)='./file0\x00', r1, r2, 0x800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000480)='/dev/lo\x81p#\x00', 0x7, 0x20080)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f00000001c0)={0x46, 0x0, [0x9, 0x7fffffff, 0x4, 0x8]})
lseek(r4, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:57 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x822, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:57 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7ff, 0x21c500)
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000140)=""/192)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x84dc}, 0x1c)
listen(r0, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = accept(r0, 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r6, r7)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000000c0)={<r8=>r4})
bind$x25(r8, &(0x7f0000000200)={0x9, @null='               \x00'}, 0x12)
perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x89, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r9, &(0x7f0000a34fff)='H', 0x1, 0xffffff7f, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r3, 0x2)
r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r11 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r12 = dup2(r10, r11)
fstat(r12, &(0x7f0000001340))
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r12, 0x84, 0x15, &(0x7f0000000280)={0xffffffffffffffe0}, 0x1)
r13 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r13, 0x0)
ioctl$TIOCLINUX3(r13, 0x541c, &(0x7f00000002c0))
sendmmsg$sock(r5, &(0x7f0000000f80)=[{{&(0x7f0000000300)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="f6d71c4bbed8cc905a06bdeda240784f64f4ccfc165fde63c609a4d5a0dd765cf835f55b55cb77b9a5d454b1fc9ea4ab64016d138514ba009b56d92e7ed9aa921f8dbb7ae9f60e53c0ffa164e515176759047c0b394662498d446c32794b5f445d571dcc60130056f870fa07110eee2b1f8d79f4bba725ba4abf5b8d3f54bb8e0e936c5b2375cd22a010ec7650400b1cad0d715ad2eaa5a875e52bfdf4c766d1b0c3ae90156bc93f76055eb4e494", 0xae}, {&(0x7f00000004c0)}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000500)="4609e995456acf3d057d693801f820df6ca8358aa34c2a", 0x17}], 0x4, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xce}}, @timestamping={{0x14, 0x1, 0x25, 0xfc}}], 0x48}}, {{&(0x7f0000000600)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="29e44e3996b0618cee6986ec0b25ae392bf31f2d8c521cc65ae1e7245adb38efa57fe1614f9db324c52ec4ab44f400c1020b44b1def6754e3f17d86065583dd0dc314765bb5184b8b5eadd7be8e56f70a41dbf3f873648e2a2dd52904f345020311b81654745a54b1b692bab02f30c935329b94e514ab1d19501714662e87e6f2518b25778d963bd146069b86baa9fd205253c82a0c335", 0x97}, {&(0x7f0000000740)="dbb9a1980adcf330d4", 0x9}, {&(0x7f0000000780)="161f7afa867eca92965ab873be4a9a7e6bf2cdf2d2d0ed03b12396c2af3d3fbddfdae4a62c6ac132bad6648565020abdb048e8597023dd47cf7238816132588369422141cf392cf77a0e37c8b0f2fe936e0f2010efd132690be5dccf963e0854cbac94d0265d969d40d0ebdc0a7cb76a1ddebec91823dec85dacb5a9b5c3a86d0b4da33309d861293942330564cd243207eddcef8d4b1960fe3e6f04404f9b0846d0aee513ac364aca821009467267b90a391fe7b7fd8f59bf203a31f1b9", 0xbe}, {&(0x7f0000000840)="c702d99138326c41233224987163923870ad92411e525ed7a6df5e3a6a67fef4d8bb4264672c98f6fcb25c735a44394e3cc951df8ca521531669656c22a31fd4059ff9f377f7f77a1c647232eb0b9cb2ed596f0f2c84860aa8a5861c58539c73992afe141422c422d663848a7dee36f7505cee3ccdd3441b8d5fc190d22eb2512f1d6a1ac0a53d46e5037a0c7fce3677881360e60bc6c9f3c79fe76b2898625fbc4cd4de639e07a0bd0e091ec7eac6fc8e30047f3d", 0xb5}], 0x4, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}}, {{&(0x7f00000009c0)=@l2={0x1f, 0x7, {0x0, 0x2, 0x1f, 0x9, 0xfffffffffffffffc, 0x1e777b96}, 0x3ff, 0x93}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="f9a2a5d4c2223d92eb13595e7e0c0e1110a9eafdec136a5ce7a21385e80e16b6fe9f713d8512531fdab124101961dc4d33ef94a3c9c06a68d22df9c22fabc8f20427a6ccc7", 0x45}], 0x1, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x74}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)="0cb0c5a7a777721620b29c43309563ce1138f924bc59af1a3a16d7b8523de555f2839adfb19e5d24ab3b5d3106a703542dae1ea5cc674f2b3780bd475e84caa1e1355c6f40705e75eb5b7b58b505327dbdb050dac7405ff93669b1342c9e2d3fdaa7b9126ea7015ff88b76420ae783892bbd56f24b3a054fa3da61c9176d712fb88a5719cf0d2db4ccd071dafa4740a704c2bbc9b38a7fea4794c91d07eb185cb544b2c35f164cad90ec06e1aa1a160393ee2cbc57e611918edff174ab22a7acfb190241d9148aed78db746c2ae8b60111ecdea45c203135cb2825e2963f0fb4044f7429bcb0ed6a4ad1d0573a0b6a21966098a3", 0xf4}, {&(0x7f0000000d00)="37f8bd0cc93b6d97dc2a4bff03710ff39ce6a562701f3ca68ebe5d8f514cc9ca897f861fbee7506a686d0a2c711bb3d3cc7eac48c3c3efefd3af6192c66437a806c93258b685a31a9c7f2cc333c8908a268fbb0a3b35957c1afdcf722a42848bebd5adeb4d866857619b27cb107f058644fcb07630036216b6533b8ec5d8379bc9fee0f79eda6c4740d5009cba9053dac35dadf828b4dd6aff60bd0a95be6f9403ca227bb95c2f1c9787baacb3593a88673a4867e4e104a57e478e856249b0d71073e1f95bf62425c269b407fdb7c0ad1c5c19ed0a1a2e4661ddb752712dbef57f54d71f518ff32eb0a4b7c0a1c79ab21c482587a4efa5", 0xf7}, {&(0x7f0000000e00)="ee4d603d270cd50c5e56b86651c268c0079e1eb5c18fd1e91dcd262a18bacaccbeeec9c3dc78c5cadf67911ce82eaab5642a56c4615ac2bca82b1318d352e04b5e95701d62cb7f046484c1f473d8bd2a337da5e5f55006d72906c6598a", 0x5d}, {&(0x7f0000000e80)="1a713a2f69c4d315a5960e92878989cac27719a1b49bac9e71f01ce3ea36689a954b876a2f1fc15bd469c96ee8b7083aed1a3f63365b47", 0x37}, {&(0x7f0000000ec0)="fe45dec175eef4a66821e07f11441af556", 0x11}], 0x5}}], 0x4, 0x4)

18:05:57 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0xf, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9, 0x0, 0x9, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000004, 0x0)
r1 = gettid()
r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2)
r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0xffffffffffffff78)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="01004000c6c924324604ffff3378105b8e76ae8d431eebe7dfec4497f4f5cc7bf7e754cf2d965621f03665bfc5fabe9ae7f798d18213028359af04c9aa4a88d7a9b6f8cec6813b351405890cdd7a976450f2d0a123802ba7855eda092256748f19cd0b4a1e3b7f2af0c4191171e2b1e50a036b2b44c654bafa8ffeec020000000000", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, &(0x7f0000000100))
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r7 = dup2(r5, r6)
fstat(r7, &(0x7f0000001340))
ppoll(&(0x7f0000000040)=[{r7, 0x817c0882be6121c3}, {r3, 0x4}], 0x2, &(0x7f0000000180), &(0x7f0000000280)={0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000440)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000))
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r8)
r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r9)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000002c0)="420f080f01c2b8010000000f01d90f20c035000001000f22c0f047864a52c744240035000000c7442402f9ffffffff1c2466b890008ee8a50fc75dba410f29dc", 0x40}], 0x1, 0x16, &(0x7f0000000340)=[@cr4={0x1, 0x102002}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, 0xffffffffffffffff)
dup3(r0, r10, 0x0)
tkill(r1, 0x1002000000016)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

18:05:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x823, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1279.711943][   T26] audit: type=1804 audit(1568484357.960:3894): pid=25359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/33/file0" dev="sda1" ino=16521 res=1
18:05:58 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1279.804783][   T26] audit: type=1804 audit(1568484358.000:3895): pid=25367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1096/file0" dev="sda1" ino=16530 res=1
18:05:58 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000ac36516b9c34121e42ac8c2c54d0a93b92cd233037869c932394a7b0e9a6f38c021e002f202f1654c59ce8122700109c8d047897eaa2c3357c983de39848b8fc99129e5b6e080fb93002b406c0ae1eb357bec352c782b0ac10c71099d9e8abf96811945315368cf72f63ec1f01922abaf43178e3c3577af0b7a1494b800c7e705ef8353bb41a348b70a400000000000000008adc28da3be92f0da7a82d9f2cbbaaca339120e618797f24dc3fc04eeced20e05e51927eae1b97dbb034c9c313606acb23f0522c892a1aa7786920d8c5714af37076199edf6da6", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x9, 0x9}, &(0x7f00000001c0)=0x8)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x10, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:58 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x824, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:58 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='g/capi>m\xca\x01\x00\x00\x80Jc\x00\x00\x00\x00\x00\x06\xce', 0x80, 0x0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getresgid(&(0x7f0000000300), &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000440))
fchownat(r0, &(0x7f0000000240)='./file0\x00', r1, r2, 0x800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000480)='/dev/lo\x81p#\x00', 0x7, 0x20080)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f00000001c0)={0x46, 0x0, [0x9, 0x7fffffff, 0x4, 0x8]})
lseek(r4, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x14, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:58 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x8000a, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140))
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x26a7, 0xa8001)
r5 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2ca, 0x80)
ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000380)={@null='               \x00', 0xf, 'team0\x00'})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:58 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ff}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x825, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0xc0, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:58 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000ac36516b9c34121e42ac8c2c54d0a93b92cd233037869c932394a7b0e9a6f38c021e002f202f1654c59ce8122700109c8d047897eaa2c3357c983de39848b8fc99129e5b6e080fb93002b406c0ae1eb357bec352c782b0ac10c71099d9e8abf96811945315368cf72f63ec1f01922abaf43178e3c3577af0b7a1494b800c7e705ef8353bb41a348b70a400000000000000008adc28da3be92f0da7a82d9f2cbbaaca339120e618797f24dc3fc04eeced20e05e51927eae1b97dbb034c9c313606acb23f0522c892a1aa7786920d8c5714af37076199edf6da6", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x9, 0x9}, &(0x7f00000001c0)=0x8)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:05:58 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x826, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0xec0, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r3, 0x0, &(0x7f0000000040)=0x10000000006)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)
dup3(r4, r2, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x9, 0x4)
sendfile(r0, r1, 0x0, 0x80003)

18:05:59 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:59 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x33fe0, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:59 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x827, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:59 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x7ffff, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:59 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x40, 0x0, 0x1}, 0x3c)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fstat(r2, &(0x7f0000001340))
r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x76, 0x440)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000d40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="080727bd7000fcdbdf250200000014000900fe80000000000000006e90cc86c45783458dee45d2cd000000000000aa08000a004e2400001400090027ed368b6923338a505c8cc58ab0e12308000400030000000800020002000000080001004e22000308000a004e230000140009000000000000000000000000000000000108000600e0000002"], 0x80}, 0x1, 0x0, 0x0, 0x20008112}, 0x0)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x16b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="24ab73e0e36d71d1c6e3778a36a70021"}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xdf}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x17}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040001}, 0x340880c8)
syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000)
socket$kcm(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$nbd(0xffffffffffffffff)
socket$kcm(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)

18:05:59 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:59 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x828, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:05:59 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x20000012, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:05:59 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:05:59 executing program 1:
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0edca50d5e0bcfe47bf070")
fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0)
write$binfmt_script(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="000000003cb20500649e0a"], 0xb)

18:05:59 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x829, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r3, 0x0, &(0x7f0000000040)=0x10000000006)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)
dup3(r4, r2, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x9, 0x4)
sendfile(r0, r1, 0x0, 0x80003)

18:06:00 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0xfffffdef, 0x0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:00 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2001, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040))
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000100))

18:06:00 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x82a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:00 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:00 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:00 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x82b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:00 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:00 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x3, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:00 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x82c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:00 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:00 executing program 1:
clone(0x200000043fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140))
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x20000, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0xfff, 0x8400)
ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x8002, 0xe00000, 0x956})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
accept4$llc(r2, 0x0, &(0x7f0000000000), 0x80000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x7, 0x6}, {0x2, 0x7ff}], r4}, 0x18, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
ptrace(0x10, r0)
ptrace$getsig(0x4204, r0, 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000003c0)=""/149)
fstat(r8, &(0x7f0000001340))
r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r10 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r11 = dup2(r9, r10)
fstat(r11, &(0x7f0000001340))
ioctl$BLKROSET(r11, 0x125d, &(0x7f0000000500)=0xd0)
r12 = dup(r8)
ioctl$DRM_IOCTL_ADD_MAP(r12, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x8, 0x1, 0xf4d6e791789f64e0, &(0x7f0000ff2000/0xe000)=nil, 0x10000})

[ 1282.595878][   T26] kauditd_printk_skb: 7 callbacks suppressed
[ 1282.595892][   T26] audit: type=1804 audit(1568484360.840:3903): pid=25560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
[ 1282.675951][   T26] audit: type=1804 audit(1568484360.900:3904): pid=25560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
[ 1282.752413][   T26] audit: type=1804 audit(1568484360.900:3905): pid=25560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
18:06:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000002c0)={0x8000005, 0x3, @name="80f6387898a0db27a9c9195b7101000000b94b8126f0be5b1ed67e7629c215ec"})

18:06:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x82d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:01 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000002c0)={0x8000005, 0x3, @name="80f6387898a0db27a9c9195b7101000000b94b8126f0be5b1ed67e7629c215ec"})

18:06:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x82e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x5, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:01 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x6, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000002c0)={0x8000005, 0x3, @name="80f6387898a0db27a9c9195b7101000000b94b8126f0be5b1ed67e7629c215ec"})

[ 1283.347040][   T26] audit: type=1804 audit(1568484361.590:3906): pid=25593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
18:06:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000f8b3e1cd77cad5104198001c004e3ba65661268f0dc616001800010014f0f454e50956000296c10000000000000000000008001b000200000000000000000081"], 0x44}}, 0x0)

18:06:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x82f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:01 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1283.465943][   T26] audit: type=1804 audit(1568484361.620:3907): pid=25593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
18:06:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x7, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1283.591092][   T26] audit: type=1804 audit(1568484361.620:3908): pid=25597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
18:06:01 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000002c0)={0x8000005, 0x3, @name="80f6387898a0db27a9c9195b7101000000b94b8126f0be5b1ed67e7629c215ec"})

[ 1283.639834][T25613] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1283.644250][   T26] audit: type=1804 audit(1568484361.640:3909): pid=25599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
18:06:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x830, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:02 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1283.754673][   T26] audit: type=1804 audit(1568484361.660:3910): pid=25593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/37/file0" dev="sda1" ino=16645 res=1
18:06:02 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000580)=0xe8)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={<r3=>0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r4 = socket(0xa, 0x6, 0x8)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840)='nbd\x00')
r6 = socket(0xa, 0x80005, 0x0)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000640)=""/25, &(0x7f0000000680)=0x19)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='9\b.\x00', @ANYRES16=r5, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14)
r7 = openat$cgroup_ro(r1, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000940)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f00000001c0))
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r9, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
pipe(&(0x7f0000000240)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PPPIOCGFLAGS(r11, 0x8004745a, &(0x7f0000000600))
ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'})
getsockopt$bt_BT_SNDMTU(r10, 0x112, 0xc, &(0x7f0000000280)=0x7fff, &(0x7f00000002c0)=0x2)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0)
r12 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r12, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

18:06:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x831, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x8, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:02 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:02 executing program 1:
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4f, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000001c7fafd1436a58da9665c9c13a874c347e9fb56b9f556e376043e24bd6cacbbf471f78af6d0642a8af9583bdac2bfec4750c05708925e041d007cb6ff28474c340b73d33e7e85ec76ff28efc7e7d6f0cb53aa21da60bae2be1b", @ANYRES16=r3, @ANYBLOB="200029bd70f9fb7b8e6d05616813c6a5a6965300fedbdf250200000008000400010000001c00030008000300000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)
fstat(r2, &(0x7f0000001340))

18:06:02 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r2 = open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
write$P9_RRENAME(r4, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x1)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340))
r9 = socket(0xa, 0x6, 0x8)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x70, r10, 0xa12183d63a69578e, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x20000010)

18:06:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x832, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x9, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1284.224755][   T26] audit: type=1804 audit(1568484362.470:3911): pid=25650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/39/file0" dev="sda1" ino=16897 res=1
18:06:02 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
syz_mount_image$f2fs(&(0x7f00000003c0)='f2fs\x00', &(0x7f0000000480)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

18:06:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xa, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x833, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1284.368671][   T26] audit: type=1804 audit(1568484362.480:3912): pid=25656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir498117854/syzkaller.shs4gj/39/file0" dev="sda1" ino=16897 res=1
18:06:02 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)=0x2)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r4, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:02 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffffffffffff}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:02 executing program 1:
clock_getres(0x0, &(0x7f0000000140))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x1331045151d1a20f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:06:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x834, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:02 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semtimedop(r3, &(0x7f0000000040)=[{0x1, 0x100000001}, {0x0, 0x8000, 0x1800}], 0x2, &(0x7f0000000080)={0x0, 0x989680})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

18:06:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xb, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:03 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x835, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xd, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:03 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:03 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x4, 0x20000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x836, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xe, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:03 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100))

18:06:03 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:03 executing program 5:
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='<wfdnoR', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

18:06:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x837, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:03 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:04 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x10, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x838, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1285.757368][T25776] 9pnet: Insufficient options for proto=fd
[ 1285.833159][T25782] 9pnet: Insufficient options for proto=fd
18:06:04 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000a0081001f03fe0504000800080008000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
semget(0x1, 0x0, 0x1)
semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000340)=""/96)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000003c0)=0x5, 0x4)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000400)=[0x1], 0x2)
dup2(r2, r4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0xfffffcfc)
bind$can_raw(r3, &(0x7f0000000100)={0x1d, r7}, 0x10)
r8 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x400, 0x400)
getsockopt$packet_buf(r8, 0x107, 0xd, &(0x7f0000000440)=""/96, &(0x7f0000000200)=0x10000011d)
r9 = semget$private(0x0, 0x3, 0x400)
semctl$IPC_INFO(r9, 0x5, 0x3, &(0x7f0000000140)=""/84)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg(r10, &(0x7f0000000a80)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffff96cc, @reserved}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="97192f", 0x3}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x530}, 0x40000)

18:06:04 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480))
ioctl$KVM_SET_PIT(r1, 0xc048ae65, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x3e3f9daa4ad834d0, 0x80000)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r6, r7)

18:06:04 executing program 5:
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='<wfdnoR', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

18:06:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x11, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1286.013354][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
18:06:04 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x839, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1286.163528][T25803] 9pnet: Insufficient options for proto=fd
18:06:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x12, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:04 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
flistxattr(r0, &(0x7f0000000040)=""/89, 0x59)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x80)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
preadv(r2, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/230, 0xe6}, {&(0x7f0000001300)=""/69, 0x45}, {&(0x7f0000001480)=""/181, 0xb5}, {&(0x7f0000001380)=""/47, 0x2f}, {&(0x7f0000001540)=""/135, 0x87}], 0x8, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3a8, 0x6c00)

18:06:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x83a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x83b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x13, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:05 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:05 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0xd0fc7e82637d25f3, &(0x7f0000000180)=[{0x5, 0x4, 0x9, 0x80000000}, {0x9, 0xffffffffffffffff, 0x9, 0x2d}, {0x1c0000000000000, 0x3, 0x80, 0x7ff}, {0x5, 0x10001, 0x1, 0xfffffffffffffffb}, {0x6, 0x400, 0x7, 0x2}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x4, 0x3b)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

18:06:05 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
getrusage(0x1, &(0x7f00000001c0))
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:05 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x83c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:05 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
flistxattr(r0, &(0x7f0000000040)=""/89, 0x59)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x80)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
preadv(r2, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/230, 0xe6}, {&(0x7f0000001300)=""/69, 0x45}, {&(0x7f0000001480)=""/181, 0xb5}, {&(0x7f0000001380)=""/47, 0x2f}, {&(0x7f0000001540)=""/135, 0x87}], 0x8, 0x0)
preadv(r1, &(0x7f00000017c0), 0x3a8, 0x6c00)

18:06:05 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x14, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:05 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x83d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:05 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:05 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x15, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:05 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
writev(r4, &(0x7f0000001640)=[{&(0x7f00000001c0)="8d48b7ffc98920e4cee0051180dbcc3deff32effd09f920cafb96f492b602d33ed72f33ba4b52e2cbdfe8f820e4faddf9814fa9728aff78813e832e88d08d7b639ac603a550749efa49e1f8283c0420993c0d032b1aa37ffdfcdfef29036947cdb676f16816a76f661e62165ff6e0af68b6665c4b9f2550273ea799615e13e726077d67e026849ddf430c340205e997b64bf20ce4ecd74ec7d8556619bbdaa98213c5409b448d05baa", 0xa9}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000002c0)="22ac08fafbcc2a276a7c1c5bf57df7491234e1f95b211f4ffb8a09a32cc64c980c29f0eab0a7ac749288b95a88962bdcece3402443f90857c572e4d0d19311c7502d404bbadebfa072cb033f495df3d98ecf172538340fa1d58c8d741943a6c8b9432802957cfbe7f19c37f1bb4998e431615f019482c852aaa8070bbe", 0x7d}, {&(0x7f0000001380)="9951c7082622b270e58c04674176285dc7a4d874b2fb83239662a4d74f8fefd28404c9d42e3cffbb11e4def494d58ef5430bdd7ea62c600b555d18999a94f72450c3a0de9c874e921e763388cfc533af262dc4ca0f73e1e6d8c16625d8f7dae991af576c83a73f3230869f96b560739eb07ae82327a29006dec37d913479c489255539d1559045f49703102204af786da23d6318ccccefbe3866e253f14543b448d6ab503aaddf33921e704543f8e50f3bf4f6350776305695a591", 0xbb}, {&(0x7f0000001440)="d3f853b8ae54f7f9ea491ba2f93a8f312368b01a0f83e14989d383f789b0e486728f721ccbc0bbfadeb6d8e896019275086ea0ce06cb0abe0fff9ee0e323dd5457b22bfb381b", 0x46}, {&(0x7f00000014c0)="61653226357a3bd7a5698ce6541adf65a4b34864276082309f682798e62232858c045882304632528017bd800a2b522cd322dc934e843d6fae13c47d00e129ff118352fee8f6358aaef1e330e9ff23c0887f4f425e02be46ac27c4a75d0e3256d48c1a54e0b07179", 0x68}, {&(0x7f0000001540)="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", 0xfe}, {&(0x7f0000000140)="5a589256ed3631f1a46fa044fe8ec2d2b3f03c7356ee2826ce27cc7bf5360017db0027b8fa43b0d8dbbddc5ce4b68a51e114f86ea2d58755ee", 0x39}], 0x8)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:05 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x83e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:05 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:05 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x16, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1287.608837][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1287.615367][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1287.624534][   T26] kauditd_printk_skb: 12 callbacks suppressed
[ 1287.624548][   T26] audit: type=1804 audit(1568484365.850:3925): pid=25882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1377/file0" dev="sda1" ino=17153 res=1
[ 1287.790438][   T26] audit: type=1804 audit(1568484365.930:3926): pid=25882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1377/file0" dev="sda1" ino=17153 res=1
18:06:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000000000000000000000000d2975492eb6647878f831c23fcca238a2f35dd209f15786f9a8fd4e1b1a23674c059e0ce3d45a5f3d65674d16f69d44683365cf192223c33e20c3800be8f62ca5442add1d9e0ec19dd89d017dfd8beb1500f1a3ee521bc"], 0x10}}, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000000))
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x22200)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x50480, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x7, 0x1, 0x8, &(0x7f0000ffc000/0x2000)=nil, 0x80})
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/102)

18:06:06 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480))
ioctl$KVM_SET_PIT(r1, 0xc048ae65, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x3e3f9daa4ad834d0, 0x80000)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r6, r7)

18:06:06 executing program 3:
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
write$P9_RLOCK(r4, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x3}, 0x8)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x200000000000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x83f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x17, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:06 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x840, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x18, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:06 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1288.071601][   T26] audit: type=1804 audit(1568484366.320:3927): pid=25911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1378/file0" dev="sda1" ino=17284 res=1
[ 1288.204662][   T26] audit: type=1804 audit(1568484366.440:3928): pid=25934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1378/file0" dev="sda1" ino=17284 res=1
18:06:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x841, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1b, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:06 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file2\x00', 0x4801, 0x9)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,dfltgid=', @ANYRESHEX=r7, @ANYBLOB=',cache=fscache,cachetag=/dev/dmmidi#\x00,access=user,cache=loose,loose,version=9p2000,access=user,access=any,fowner<', @ANYRESDEC=r8, @ANYBLOB=',measure,euid<', @ANYRESDEC=r9, @ANYBLOB="982033f7241d22dc59bafe1c5db40441885c5042254890fe63a58b159fd680ae21e381dafb87d47f78688b79ecdcbb285be69350d4dc202dbbe8688ea11ef2bbbb0b7a50cb87b68cc9c7bb698de5cf84a4656457b25ccc1fddffa0a21b0cf7f64853c3f086ad1e2baa64ded21f5276faee9b5c338aa392e7021c37cd47b7ad0db965e6bc62155266c5586dec5d96c3e63b52b552103a07a98fd47fba22000000000000"])
r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r11 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r12 = dup2(r10, r11)
fstat(r12, &(0x7f0000001340))
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e25}, 0x2c, {[], [{@fowner_lt={'fowner<', r13}}, {@measure='measure'}, {@euid_lt={'euid<', r14}}]}})
mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x2000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000000000000\r0000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',blksize=0x0000000000001400,default_permissions,default_permissions,default_permissions,audit,uid<', @ANYRESDEC=r13, @ANYBLOB=',hash,fsname=/dev/loop#\x00,\x00'])
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r15 = socket$inet6(0xa, 0x80001, 0x0)
r16 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r16, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r15, r16)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:06 executing program 5:
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
write$P9_RLOCK(r4, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x3}, 0x8)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x200000000000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:06 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1c, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:06 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000007126000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000400f9ffbd34010000000000950000000000000005000000000000009500000000000000ad4a3ee1ff76c726cf0c4a9a5be3fd8cf8"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40082, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r3, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000003c0))
r4 = getpid()
fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r4})
ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000380)={@remote, <r5=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r3, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r5, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r6=>r5})
sendmsg$nl_route_sched(r1, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42008405}, 0xc, &(0x7f0000001300)={&(0x7f0000000240)=@deltclass={0x10ac, 0x29, 0x0, 0x70bd2b, 0x25dfdbfb, {0x0, r6, {0x3, 0x8}, {0x0, 0x1fffc}, {0x7, 0x5}}, [@tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x79}}}, @TCA_RATE={0x8, 0x5, {0xfffffffffffffffd, 0x4}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x1050, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x68f, 0x1, 0x8, 0x3, 0x8000, 0x7, 0x6, 0x7f, 0x7ff, 0x1, 0x1f, 0x0, 0x2, 0x6, 0xfff, 0xba78, 0xffff, 0x3ff, 0x8, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x7ff, 0x7, 0x0, 0x1f, 0x8, 0x2800000000000000, 0x5, 0x1ff, 0x169d96cc, 0x783, 0xdf7, 0x4, 0x3f, 0x1000, 0x7fffffff, 0x7f, 0x3fe88828, 0x3, 0x1, 0x30, 0x0, 0x401, 0x4, 0x6, 0x3ff, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x3, 0x10000, 0x5, 0x8, 0x5, 0x4, 0x3, 0x96, 0x6, 0x5, 0x6, 0x4, 0x9, 0x7f, 0x1d3, 0x401, 0x3, 0x5, 0x80000001, 0x6, 0x2, 0x80, 0x6, 0xc3, 0x3, 0x8, 0x7ff, 0x6, 0x100000000, 0x100, 0x4, 0x5, 0x1, 0x8, 0xffffffff, 0x8, 0x3, 0x59, 0x9, 0x80000001, 0x7, 0x608, 0x2, 0x3ff, 0x7, 0xffff, 0x80000001, 0x8, 0x6, 0x646f, 0x100, 0x9, 0x5, 0xffffffffffffffff, 0x100000000, 0x401, 0x5, 0x5, 0x10001, 0x0, 0x4, 0x1f, 0x8, 0x0, 0x1f, 0x7, 0x2, 0xff, 0x1, 0x4, 0xdf2, 0x3, 0x400, 0x100000001, 0x6, 0xfffffffffffffe01, 0x2, 0x100, 0x4, 0x9, 0x1, 0x4, 0xfffffffffffffffd, 0x1, 0x1, 0x10000, 0x4, 0x400, 0x800, 0x7, 0x2, 0xfffffffffffffffa, 0x4, 0xffffffff, 0xfffffffffffffffa, 0x8, 0x200, 0x7b5, 0x7ec8648e, 0x0, 0x6, 0x647, 0x0, 0x2, 0x7, 0xb60, 0x1, 0x5, 0x7, 0x400, 0x5, 0x2, 0x100000001, 0xfffffffffffffe00, 0x800, 0x0, 0xffffffffffff3312, 0xf4, 0x9, 0x0, 0x8, 0xfffffffffffffc00, 0x5, 0x2, 0x1, 0x8001, 0x8000, 0x200, 0x2f, 0x100, 0x5, 0x9, 0x7, 0x0, 0x1, 0x1, 0x1, 0x7, 0xda, 0x88, 0x8, 0x193, 0x9f0e, 0xf60, 0x6, 0x20, 0x9, 0x7fffffff, 0x10000, 0x3, 0x5, 0x6, 0x100, 0xffffffffffffffff, 0x2, 0x89f, 0x6, 0x2, 0x200, 0x7, 0xfffffffffffffc01, 0x9, 0x427b, 0x8, 0x1, 0x0, 0x1000, 0xffff, 0xff, 0x4, 0x794, 0x3, 0x4000000000, 0xffff, 0x77f6, 0x8, 0xfbfe, 0x1, 0x1, 0x12, 0x1, 0x0, 0x40, 0x8, 0x3c8, 0x80000000, 0x1ff, 0x7, 0x1, 0x3, 0x800, 0x8, 0x100, 0x1, 0x0, 0x7, 0x2, 0x6, 0x3f, 0x0, 0xc7a9, 0x71, 0x3, 0x10000]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x81}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x5, 0x5, 0x1ff, 0xf1b, 0x101, 0x6, 0xfffffffffffffc3f, 0x81, 0x0, 0x5, 0x5, 0x1, 0x9, 0x401, 0xa98, 0x6, 0x7ff, 0x2, 0x0, 0x2, 0x6, 0x1f, 0x40, 0x6, 0x3, 0x0, 0x7ff, 0x0, 0x6, 0x9, 0x3, 0x0, 0x10001, 0x4, 0x1, 0x40, 0x2, 0x8, 0x9, 0x4, 0x8, 0x3, 0x76b, 0x1, 0x5c, 0x0, 0x9, 0x6, 0x8, 0x92, 0x18e, 0x266, 0x4, 0x0, 0x1, 0xff54, 0x8, 0x2, 0x401, 0x40, 0x5, 0x9, 0x40, 0x4, 0x7fffffff, 0x800, 0xd3b7, 0x1, 0x7, 0x0, 0x0, 0x80000000, 0x0, 0x80000, 0x6, 0xffffffffffff8000, 0x4, 0x7, 0x138, 0x6, 0x7fff, 0x80000000, 0x7, 0x0, 0x81, 0x3, 0xfffffffffffff3e6, 0x9, 0x27d, 0xfffffffffffffffc, 0x80000000, 0x9, 0x1, 0x7fff, 0xde8c, 0x9b4f, 0x40, 0x3, 0x4, 0x6, 0x7fffffff, 0x0, 0x8, 0xf49, 0x0, 0x101, 0x2, 0x81, 0x6, 0x7, 0x1, 0x9, 0x8800000000000000, 0xa3d6, 0x583, 0xfffffffffffffffb, 0x401, 0x1, 0xff, 0x100000000, 0x0, 0x75, 0x6, 0x200, 0x401, 0x9, 0x3ff, 0x2, 0x0, 0x10001, 0x9, 0x0, 0x4, 0xa9f, 0x23, 0x2, 0xff, 0x1, 0x100, 0xfffffffeffffffff, 0x7, 0x5, 0x7, 0xff, 0x3, 0x3, 0x1ff, 0x1000, 0x1, 0x200, 0x5, 0xc6, 0x5, 0x8000, 0x5, 0x1, 0xfffffffffffffff9, 0x55f926d8, 0xffffffff, 0x101, 0x20, 0x400, 0x7fff, 0x1, 0x100, 0x8, 0x8, 0x3, 0x3, 0xb, 0x8, 0x80000001, 0x1ff, 0x800, 0x7, 0xffffffff, 0x1, 0xc8e1, 0x3, 0x100, 0x10000, 0x5, 0x0, 0x20, 0x1, 0x5, 0x5, 0x8, 0xee54, 0xcb6, 0xfffffffffffffffa, 0x1, 0x9, 0x134, 0xdf2d, 0xa527, 0xfffffffffffffffd, 0x7, 0x200, 0x800, 0xa56, 0x5, 0x9, 0x3ff, 0x2, 0x46b, 0x5a14, 0x1, 0x100000001, 0x2, 0x6, 0x1ff, 0x7ff, 0x4, 0x17f, 0x3f, 0x40, 0x1, 0x80000000, 0x8bd, 0x8d15, 0x9, 0xd5, 0x100000000, 0x2, 0x6, 0x7, 0x26, 0x10001, 0x8000, 0xfffffffffffffc3f, 0x2, 0xfff, 0x100000001, 0x10001, 0x5, 0x1, 0x32e, 0x4, 0x6, 0x4, 0x2108, 0x200, 0x100, 0x0, 0xffffffffffff7fff, 0x5b, 0x6, 0x4, 0xffffffff00000001, 0x2, 0xffffffffffffffff, 0x5, 0x6, 0x1]}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x6, 0x1, 0x3ff, 0x8, 0x9, 0x101, 0xb90c, 0x7, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffaa1, 0x4a, 0xdb, 0x10000, 0x8, 0x80000001, 0xffffffff7fffffff, 0x8001, 0x80000000, 0x5, 0x6d3e, 0xad, 0x340, 0x9, 0x8, 0x8, 0x3, 0x6, 0xfff, 0x9, 0x0, 0xe5c, 0x3, 0x0, 0x4, 0x401, 0x100000000, 0x6, 0xfffffffffffffffe, 0x1, 0x7fff, 0xf51, 0x2, 0xfffffffffffffffb, 0xffffffff, 0x3, 0x6, 0x6, 0x8, 0x2, 0x9, 0x80, 0x7, 0x401, 0xfc4, 0xfffffffffffffffb, 0x3, 0x8, 0x3f, 0x0, 0xeb8, 0xffffffffffff7fff, 0x3, 0xff, 0x10000, 0x3, 0x100000000, 0xfd18, 0x7f, 0x0, 0x2, 0x1000, 0x9, 0x6, 0x0, 0x3, 0x7, 0x7, 0x5, 0x100000001, 0x6, 0x7, 0xe91f, 0x800, 0x8, 0x3, 0x2, 0x7, 0x2, 0x1000, 0x0, 0x7, 0x200, 0x4, 0x9, 0x9, 0x100000001, 0x4, 0xa7000000000, 0x7, 0x80000001, 0x6, 0x20, 0xfff, 0x8001, 0x1, 0x0, 0xfffffffffffffff7, 0xfc, 0x9, 0x0, 0xb8f, 0x2, 0x0, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff9, 0x400, 0x4, 0x14e, 0x20, 0x6, 0x7, 0x100000001, 0x9, 0x1ff, 0x8, 0x3, 0x13, 0x3, 0x9, 0x357, 0x20, 0x9, 0x6, 0x101, 0x9, 0x4, 0x7, 0xe4e, 0x5, 0x2, 0x7fff, 0x3, 0x6, 0x1ae, 0xfffffffffffffffa, 0x8, 0xfa, 0x80, 0x3, 0x80000001, 0x1, 0x7fff, 0xe1f5, 0x20, 0x9, 0x9, 0x4, 0x8, 0x1, 0x8, 0x3, 0x4, 0x8, 0x9, 0x5, 0x9, 0x0, 0x6, 0x3df, 0x400, 0x4000000000000, 0x10000, 0x0, 0x62d7, 0xa83a, 0x7fffffff, 0x3, 0x7191, 0x6, 0x200, 0x5, 0x9, 0x2, 0x0, 0xd694, 0x2, 0x100000001, 0x3, 0x100, 0x0, 0x6, 0x1b, 0xfffffffffffffff7, 0x8000, 0xfffffffffffffff8, 0x2, 0x100000001, 0x3, 0x6, 0x3f, 0x40, 0x4000000000000000, 0x8, 0x8001, 0x7ff, 0xffffffffffff8001, 0x3, 0x98, 0x1, 0x800, 0x7, 0x1, 0x7, 0x2e72e27f, 0x2, 0x8f, 0xe5, 0xfffffffffffffff7, 0x0, 0x7b, 0x100, 0x10001, 0xffffffff00000001, 0x9, 0xffff, 0x0, 0x6, 0xfffffffffffffff8, 0x100000001, 0x6, 0x0, 0x0, 0x1ff, 0x401, 0x8, 0x6, 0x0, 0x1, 0x9, 0x0, 0x1, 0x0, 0x4, 0x9, 0xfff, 0x1, 0x3ff, 0x400, 0x9, 0x9, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xffffffffffffffff, 0x0, 0x8, 0x7fff, 0x7, 0x4}, {0x3, 0x1, 0x200, 0x4, 0x258d, 0x5}, 0x7fffffff, 0x3, 0x9, 0xfffffffffffff800, 0x7fffffff}}, @TCA_HTB_RTAB={0x404, 0x4, [0x69b, 0xc2, 0x4, 0x8, 0x7, 0x8, 0x20, 0x9, 0x9, 0x1, 0x7f, 0x4, 0x1, 0x4, 0xc2, 0x3, 0x5, 0x3, 0x1f, 0xdc, 0x80, 0x4, 0x3f, 0x9e, 0x3, 0xeb9, 0x101, 0x0, 0x7, 0x8, 0xb4, 0x81, 0x100000001, 0x0, 0x3, 0x6, 0x304, 0x7f, 0x1, 0x7, 0x7ff, 0x0, 0x0, 0x67, 0x8000, 0x10001, 0x1, 0x7, 0x3, 0x1, 0x7, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x1f2, 0xffffffffffffb5f4, 0x1, 0x7, 0x206, 0x8, 0x3f, 0x2, 0x3ff, 0x3, 0x100000000, 0x8, 0x90000000000000, 0x81, 0x889, 0x4f, 0x92, 0x7ff, 0xffffffffffffff81, 0x2, 0x8, 0x9, 0x3, 0x2, 0x7, 0x0, 0x2, 0x7fffffff, 0xc36, 0x7, 0x4f, 0x5e, 0xffffffffffffffff, 0xfffffffffffffffd, 0x5, 0x4, 0xee37, 0x8, 0x100, 0x0, 0x1, 0x1, 0x4, 0x4, 0x3, 0x9, 0x4, 0x3, 0x7, 0x7, 0x80, 0x8, 0x8, 0x0, 0x38000000000, 0x10000, 0x800, 0x1, 0xfffffffffffffffa, 0x4, 0x200000000, 0x0, 0x3, 0x2, 0xfffffffffffffffa, 0x16, 0x8, 0x0, 0x1, 0x6, 0xffffffff, 0x1, 0x3, 0x687, 0x4, 0x3, 0x3b1, 0x7, 0x3, 0xfff, 0x8, 0x9934, 0x7fffffff, 0x3, 0x2, 0x3, 0xea, 0x7, 0x2, 0xb9bd, 0x1f, 0x0, 0x2, 0x3, 0x5613, 0x391, 0x9, 0x1, 0xff, 0x7, 0x8000, 0x800, 0x38000000, 0x1, 0x14, 0x9, 0x6, 0xe1d7, 0x4ad, 0x66ae, 0x14f0, 0x3, 0x3, 0x7, 0xc6, 0x5, 0xffffffff00000000, 0x4, 0x3d, 0x2, 0x9, 0x8, 0x200, 0x2, 0x5, 0x7f, 0x996, 0x9, 0x2, 0xcf53, 0x8, 0x6, 0x16a, 0x7, 0x98, 0xffff, 0x8720, 0xfffffffffffffffa, 0x8, 0x7, 0x0, 0x9, 0x1, 0x5, 0x5, 0x8, 0xffffffff, 0x4, 0x0, 0x9, 0x3, 0x7, 0x6, 0x10000, 0x1, 0x8, 0x4, 0x1, 0x7, 0x8001, 0x1, 0x4, 0x7, 0x7, 0x8, 0xffffffffffffff7f, 0x40, 0x9, 0x100, 0x6, 0x10400000000000, 0x3, 0x3, 0x1000, 0x4, 0x4, 0x9, 0x7fffffff, 0x0, 0x6, 0x0, 0x5, 0x800, 0x59ef471c, 0x7, 0x9, 0x7fffffff, 0xfffffffffffffffe, 0x0, 0x4, 0x8, 0xe1ed, 0x0, 0x2, 0x9, 0x7, 0x1, 0x2, 0x6, 0xd9, 0x0, 0x2, 0x5]}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x3}}, @TCA_RATE={0x8, 0x5, {0x4, 0x2c95}}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x4040810}, 0x1)

18:06:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x842, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1288.575125][   T26] audit: type=1804 audit(1568484366.820:3929): pid=25953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1379/file0" dev="sda1" ino=17041 res=1
[ 1288.691075][   T26] audit: type=1804 audit(1568484366.900:3930): pid=25945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1379/file0" dev="sda1" ino=17041 res=1
18:06:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1d, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1288.823337][   T26] audit: type=1804 audit(1568484366.970:3931): pid=25972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1379/file0" dev="sda1" ino=17041 res=1
18:06:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x5409, 0x0)
setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@random={'\xc6\xd3T\xf6\x12\x9d\xf0j\xd7\x00\x00\x16\xef\xd1\x97', '@\x00'}, &(0x7f00000000c0)='/dev7pt}x\x00', 0xa, 0x1)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140))

18:06:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x843, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:07 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1288.912119][   T26] audit: type=1804 audit(1568484367.050:3932): pid=25953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1379/file0" dev="sda1" ino=17041 res=1
18:06:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1e, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1289.006999][   T26] audit: type=1804 audit(1568484367.070:3933): pid=25970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1112/file0" dev="sda1" ino=17288 res=1
18:06:07 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fstat(r2, &(0x7f0000001340))
getpeername$netlink(r2, &(0x7f00000034c0), &(0x7f0000003500)=0xc)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x0, 0x1b, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005a00)='/proc/capi/capi20\x00', 0x100, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2)
write$P9_RRENAME(r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r7 = dup2(r5, r6)
r8 = getpgid(0xffffffffffffffff)
get_robust_list(r8, &(0x7f0000000400)=0x0, 0x0)
syz_open_procfs(r8, &(0x7f0000003540)='net/rpc\x00')
r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r9)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003580)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r11 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x80)
dup2(r10, r11)
ioctl$UI_ABS_SETUP(r10, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
fstat(r1, &(0x7f0000003640))
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001ec0)={<r12=>0x0, @dev, @multicast2}, &(0x7f0000001f00)=0xc)
sendmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="431a262226d3cf4973ddecb005000c987496ce1214a4f91515c35ad5d4bdbf5d09f6bcebdcdc78941dcb6072d03f172605b72a12a8eb745b3a3b1b7c3c48533fb2a1d1cab38a3b6a6f2e18a473d435fc076b6e11fc33bbe2bd938416622456cf894b7a88dc3c994b196b2d953be274e832248dd8fd9cfe880556a4a2c100a17de5af80d951ca3ae085b11079da1e499d596e677401732d0008ce7b51", 0x9c}], 0x1, &(0x7f0000000340)=[{0x88, 0x116, 0x3f, "f5603d5dcbe04fba4c275d652a8e3a6cf35d4c61f1febb65be7623b10ea8bd794d4b21b015d059815ecf318863a1f8fcdfb7a83103c05dab10a43a3cd13f37843e148aa7f00136e2a59469ef5d8937db37943f75b03ee5454cc91e73863d72c119edf33435cb9a75fa70ba5269dfc7fbb1b3"}, {0x68, 0x10b, 0x9, "b824a76c370fa90fbb72de89af979c3a1c764f4e7e6160b98a741d6a464e39289beec49d276d0990fb50432e2b5a202fcd9541a845f782490c2f124f1aff1bc67fef04435b2d82dc56b6238af99a01a7b0536eb250"}, {0x10, 0x108, 0x1000}, {0xe8, 0xa1, 0x0, "03bc512eed32a68c12d16d916d202eb183c648a097a7a6920072be251fc98dc5fba79c8d6557b1d6d449cde9e29e7e2e5ac4284b69cd043a0586d1d2c207bf36238ceb822acf495bae68d6da8a6bfbbf7d40e98f901857511ee5db18fa6da289bf59b5b4011eb60c7008974794be34522e1a4abacdc3638df483eeac42ac76300e9f5c2ea09670fa1a6af1f698124c119813a1b4b176e7e5df93a97ba9f53df1760da50687a77208910c786318d14efe566bba4c1409c0e6accb581093a8e8e93dbe5d052d84e0628dcba5d315776554fe2969a3"}, {0x78, 0x110, 0xffff, "bef830db4349da1819ece0e54d730e67d61396c57bb4e183904deeaca4203cc5893b289a74f5c739b2e231ef9836a35a5e3e26c05d05d7196147cd75fcdb312ae43ea806341cbe08b7564248709a526a0194f3b6f892ececb84932ff0e6f777cca594c2e"}, {0x28, 0x200, 0x7, "bf2a606a6d2b1f4e651c73141649ced37896"}, {0xc8, 0x1, 0x0, "c1da5574ec68a86aed53c0ae05eb1ae3bc1ccb80c2501a711b42207742acad569e8e119669d85506e12bb2dee53d0be5869338fc7999fb76e36745c94483ef405426227b96f5d9f5b207b1449b77ee9ece55c100716e8b71d60f5193496ba633a53c11185dd1d6cf7cab14b15482b081e9c228a752c3d722a60411300c15ca3343e449d863ca0f678bfeb1d7165f121d344243de8233c761fe7a8e0cbc02054bce9caa53fd874cf53145aabd970b7778eb8b93adf86b"}, {0xf8, 0xff, 0x3, "22b55f3628292a0d3e492a9227799e78feb8789e688f2816e4cd528b5aa4d9c75af5e789725077a362c37b4ad899049e6a76e63d3189b7266515c7acb3bccd49e96016b7b517157d6620d9deaea7f974bc47ab2836f428de8d7a3f42d9d435769224f2a60a2d4cd9ee5c2bb0085b04fe7584692991d77adec63ae167df03f418568e2b7f9138ce4ea4fdb2009607e77d34d814cebe426c09035263e0e531e8e9b93847b89883ba9c0aeab00644bf528c1238e58cc1520ec7468a511a38fbf5b812f53a8cc02312d57812bf5d4416d5b1df0e3c596c0cb2f8a4495cb7049b3f75aaff"}], 0x448}}, {{&(0x7f00000007c0)=@generic={0x3, "b73df3b490d2b868f6fbacb0b32a758601e1e58f91d76c78fb6b7a636a00026ec1fb072e7270a40cdb4865ef967a72c5071c40d72be1ea68379e33827523f413e85f7bf228a2c35d864e81a188a16c827ff5580d55c1b82eaeccdb2228fa087ea545a9ba02329316c6258e9248bf6c087fbc16c0af634a62aa79d539dfea"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="59ef8a2a22effd0c490c989d1d0e13c608258d972953f141e809e588", 0x1c}], 0x1, &(0x7f0000000840)=[{0x48, 0x84, 0x100000001, "428bf5d0bea9578a4d013666ad5a5cc30168ccff15a40584b80909b2f5d6de2b61f3b3f116f11a23cf4f651658f0f3f968365844e17b4c4b"}, {0x18, 0x118, 0x3, "e13457"}, {0x1010, 0x10b, 0x1, "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"}, {0x88, 0x1, 0x7fffffff, "dfd9e0089f2ab1ed40e3db030ed0a44653ab342359482fa3e3bc3e0e891fa35e371c9ddbb667bdc13760b3f45ab116caa78fffa01d5e89eb9b65a7cc7180955239c7e30d8c694bc66b12912df05c041b4d06781add6508edce7a4d8c3ee176c08bc09e46c092b216ef5408addf3289352fb6f1327abc01"}], 0x10f8}}, {{&(0x7f0000001940)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x1, 0x9, "9657891f9be1d87964ea686afdf3b8349cf60226bbcb9fa34c4b6380e4978adeb1418abc69a45f5168304e9c04faadec0ae317c76a985b890a8fa2fee7b0fb", 0x1d}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)="f5d891ae2fb3fdc449ea7490b81bd8052df637dbb549de619c68e1e93f549c79f8bd19ab75cf8bcbd32d227f80383272253068be5a0c7fe0b5d6c8e819f50020a90a964873d9298d4c0a21bb47248e5c63856d33a75976fdcf5ee2fee7e255a03bb10cf136abdf18ad2e5bb59b6fa0fee7a90378e06c5d1c74dcd689592e0fb52750f4b7242220f950e23158b677e166d8acd9", 0x93}], 0x1, &(0x7f0000001ac0)=[{0x100, 0x103, 0x8, "65e79cb24190d863713f7b7e9a832bc25c847b8e4c9b4bdbdfa721a8a283868f1e5e3343aaf58e223d0ad4ba2a197539da169c4897ba59db88a08765266b35ef6a3ca52bb7d63faca6ebcab0e5d3ffc7b34282d3ab3b807a35caaeedb4b8b8486ca763f78719e8b34fcd688db2ba123ae1126396e0b7cfb86a95c40d4c721dc8d94d79cb8ba0d7070843b966d8b15c23d55fc98e997877f399569f41011b6a917b6408e8382c6a3d4ab194569a8506270fa1004e51ecaa93e061790e623eac4dc87758eb179e9da045c6b14a35fd10cba4c353da5125a63b8f7b7740289996435bbb6f6bed192229358e52"}, {0x88, 0x0, 0x20000000200, "545298cd956d11e6e6ed4f77df8e788d7089565261d5cf500cb40e32d6e2122a544c08e8e64997d5eeb16bea50b699e257c2ff0daa71550a6bea722521b61ae3db50954cdc2f648ee3c47b7a20ef88917ad3022127b146084ef67c90f7787c890889572fcb5e9ec7462c86b92665cd37e4685bf895"}, {0xd0, 0x102, 0x101, "ca5c46e756083d08cd2f3584031a1cea795c972b235e5396b71e2bdc090755a448b413c5bb403b9dca61e922830695983e4f3d3583f667163137733b280a94e9458a2f2c3436db0d654939c67c63aeb867a7049a196197a7d9f554f888dcf5e240a9084ea9859b2f8e270874a52673c2ed9c709158f050da9c2541b5013c1f35affc74949f67b09cf07db43ab0888d03b0b61d3bc8146b5ce4bdad59de755ae211c4085f530b7a2f25613c8e8c7d81cb5334b1eb5e2903320a"}, {0x78, 0x118, 0x80, "96772a643b5456796c92c44129422662625c83a88d3f4b1e6071ca6eabeb5612162ea401370c685be9bc058623da5b8ebb2243d4792104024575598c0adf7f246d6e04cfed3b5e24bbddf173f475bb20311eda5064e98f5f8bbaa350a0c7cc1a8e"}, {0x30, 0x101, 0x6, "552d88128d6f82bd71769d6a9db8d04485f308f57def9eca0db9505cef77d7"}, {0x18, 0x114, 0x10001, "7fe6f873c5b31921"}, {0x28, 0xc2475e72b175e818, 0x100000001, "5b64727ee564be279f7f673e7d1303efb8da22d35459c3d4"}, {0x58, 0x1, 0x40, "695fce90e9071213f4ca89918cc348fb5c4bfa243c0c2d46c2182af8cece0a7686e2ca1bf9f90b7cce472fbae5739ef83f6aeb0f9e1a5b0b3f44d9d4f9a8d57e2f95"}, {0x58, 0x114, 0x8, "494ad2206dcdc3acd1fa21c10dc0256323e2b3330dee7b853e080e6f0a24f264a9d4aebfcad79ee49d37589ab550d42fd95876f40ff17807972e86c0d1a420af14e256cb85d918f0"}], 0x3f0}}, {{&(0x7f0000001f40)=@can={0x1d, r12}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001fc0)="b1f75053bf9fa8f061fd89e18d5731dd3378f304c24008820681b806e7d2300d5a8e118096fa0792ca7cf9546695ea915cdcc9d7bda3f54089f094b8cce3b129af5660808e68548fd9855f0275a1d7d75c1dfdc430ceb1fa2d7a43856ce50988e408d0d3436eba444539949e85235c7c38fa2569236a65561cd7ae21d32329a02a4605378cd1e0d23b8e1c8d254c6e8f8e31251afc7e96250c31172c95baa0464a7f813d68f619953e45d10a30754983a886464fb4e942975b730002", 0xbc}, {&(0x7f0000002080)="dab02f6337feef344c360b67f90c6a369e8cf73e0d6d57435452867d80983c9e1db48dfb3e45bf099fbac1b8e8a70cf27f070c0acc24dfb8ce9136a591d43d6c58f4c30bca08d4d7932ddfd76ec1c66fba4d8052d9a779b83db593e787e144e83cd93129534877f1da6749b432e2a66e3c32ee1efda40ea763b5ad652bd494be92", 0x81}, {&(0x7f0000002140)="a2c5617170c81a81a1a6e2f436c3dec55decff7fe2a70aaf36976378badc0149b280dad539e4d9bf426524588c44754b15bc96a90acf49bd42450bff60ad701dabde33cc016edcb3f9014b69b14cfae4f2c7856fdc529fe7632907c0cf6ca57621dac7c43cf9d3eec73e709d2ceb2ea4c9", 0x71}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="145aa421256b8deff1bb3e607e72050fb074c64b5ce081123d0bcdc5f5cc22323b924fbe7f4bc84dfb99472daadd8298fa6e633f55d1af44dd7d390e303a2608fb", 0x41}, {&(0x7f0000003240)="2ac0357a9342534cfeb62a69c9407eb37581bb7f855630074493511b784085a8fd902b23099b71920c354d0a730153b5954c4bfc6874cb631112772bb1d01513323f244075b4e97f4fe3a5999dbd3b334815568c9e0cbc1b14214dfc4c7e4d5dd28c4d4b20341548332265c6c8e842db3f9b7b35b672fae94b6398033ca94fc4229668e199fedd3b9abdc437d9032855acb967a13e7f8f1d61deca062ac7722b68dadb766e1a5899d59ee88cb76de0ae9f29da3276300fe88c280551e9520658b5b0936981c67519f43b3c6fdf34c051832cb89cd0726674bfd1982695f4930fdc1b2fcec71d5837f0742ce17e4bcd8d9526", 0xf2}], 0x6}}], 0x4, 0x20040000)
close(0xffffffffffffffff)
r13 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r14 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r15 = fanotify_init(0x0, 0x0)
fanotify_mark(r15, 0x5, 0x1b, r14, 0x0)
fanotify_mark(r15, 0x2, 0x1b, r13, 0x0)
accept$netrom(r13, 0x0, &(0x7f00000001c0))

18:06:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x844, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x21, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1289.215868][   T26] audit: type=1804 audit(1568484367.460:3934): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1113/file0" dev="sda1" ino=17249 res=1
18:06:07 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
pipe2(&(0x7f00000001c0), 0x0)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
ioctl$VT_DISALLOCATE(r1, 0x5608)
pipe(&(0x7f0000000340))
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r5)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000180))
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000100)={0x3, {0x4000982, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@default, @null, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]})
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

18:06:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:07 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f00000001c0)='/\t\x00\x00\x00\x00\x00\x00\x00#\x00', 0x1, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x845, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x22, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1289.688388][    C1] protocol 88fb is buggy, dev hsr_slave_0
18:06:08 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x846, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x23, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:08 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
setns(r2, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r3)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000007f0d5e4ca401010000893624add1f6cdb942b096bdcff4c4ce3196", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={<r5=>r4, 0x9}, &(0x7f00000000c0)=0x8)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40001, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x4ca2, 0x10000, 0x80, 0x100, r4}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r5, 0x4, 0x20}, 0xc)

18:06:08 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17fffff, 0x4002011, 0xffffffffffffffff, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40000, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000001c0)={{0xd3, 0x9}, 0x91}, 0x10)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:08 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x1, 0xb3c5})
ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x2, 0x3, [], &(0x7f00000000c0)})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="78ff5f1dd416b88dc98346ace047", 0x0}, 0x28)

18:06:08 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x24, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:08 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x847, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:08 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300000800616a2f0acce5658b0000020018010800001e61ad57adb089c548e2ff92d3cc4dfab3fb0f621b487d"], 0x20}}, 0x0)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x0, 0x2, 0x7ff}, 0x18)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r6)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./bus\x00', 0x6, 0x2)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r5, r7)
fstat(r8, &(0x7f0000001340))
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000140))
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000100)=""/62)
r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r9)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000280)={'eql\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

18:06:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x25, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:08 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
accept$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x26, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:08 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
setns(r2, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r3)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000007f0d5e4ca401010000893624add1f6cdb942b096bdcff4c4ce3196", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={<r5=>r4, 0x9}, &(0x7f00000000c0)=0x8)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40001, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x4ca2, 0x10000, 0x80, 0x100, r4}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r5, 0x4, 0x20}, 0xc)

18:06:08 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:08 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x848, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x27, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:08 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:09 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xb6a9, 0x1ff, 0x1}, 0x3ff}, 0xa)

18:06:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x28, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x849, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:09 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xff})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x9, 0x2}, 0x14)
fallocate(0xffffffffffffffff, 0x6e, 0x3, 0x0)
lseek(r1, 0xfffffffffffffffd, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:09 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000ac0)={0x0, 0x142, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000000800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000100000000000080000000003a470211bbf2c95546524d46f1bcbb314b56cf50ca536dc6f19219776f3b5d4e10ad2e49491f9592427f07ca6e5ae161961df44d78d642b3f2096ae5a6a93c912ea24ac0d1eadce25e3ffd4fea81ec1bbcc291ceed914a06d5f85351b2aea248407060fe991176e91dc4c4d0f92c2760d93fd2b93e3620fd2bc2f68f321f642bf7f35b95b4d5639bd2e8fac76d9d28db68567fe15e5dd7516a6acddc08535f93facf3eff8ca92284eafdac0f415f870ddaa1771ac8252617fd8f6a36067e67de17a19f0439cb1ef4d31215ae7e6ed1d2527f0c847f36058fc77689443f5b48cd59bb545a55e4f386878f4a0aac6f68d4126c166b6ad3fba5906d117a6dee0fc675e1399301a55b16261844093f69f54e19acf9200f566876a2171c8d5102b696a2b46cbc396e1733695682a70781fd495bb993cf083c1cc61367f65e8dc5c7c7d890d0907217a9e4c4df1897b548d11dca7601ab763a176e90d42a5c7dd062dbdbb8dafaf31813abda99e677e755b59a3e903f98f9488e15da27a46ea6"], 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0xfffffffffffffe88, &(0x7f00000003c0)={&(0x7f00000002c0)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}}, 0x48}}, 0x0)

18:06:09 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:09 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0)
r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_keyring_id(0x0, r5, 0x4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:09 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x44880)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x100)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000003c0))
r6 = getpid()
fcntl$lock(r4, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r6})
ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000380)={@remote, <r7=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r5, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r7, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r8=>0x0}, &(0x7f0000000140)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@remote, 0x4e24, 0x2, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x88, r7, r8}, {0x100000000, 0x7fff, 0x7f, 0xe72e, 0xffffffff, 0x4, 0x7f, 0x3ff}, {0x3, 0x5, 0x1, 0x9}, 0x10000, 0x6e6bbe, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d4, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3503, 0x1, 0x1, 0x7fff, 0x31fc, 0x2, 0x200}}, 0xe8)
r9 = dup2(r1, r2)
fstat(r9, &(0x7f0000001340))
ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000100)={0x2, 0x5, 0x9})
recvmsg$kcm(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/63}, {&(0x7f0000000740)=""/213}, {&(0x7f0000000840)=""/71}, {&(0x7f00000008c0)=""/246}, {&(0x7f00000009c0)=""/67}, {&(0x7f0000000a40)=""/59}], 0x147}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

18:06:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x29, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x84a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:09 executing program 5:
syz_open_dev$vcsa(&(0x7f00000010c0)='/dev/vcsa#\x00', 0x100000001, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vcs\x00', 0x40100, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001140)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000001080)='net/sco\x00')
read$FUSE(r2, &(0x7f0000000000), 0x1000)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001040))

18:06:09 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:09 executing program 1:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10220, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r2 = dup(r0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r3 = syz_open_pts(r1, 0x805)
dup3(r3, r2, 0x0)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000240))
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r5 = socket(0x11, 0x80002, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xfffffffffffffff7, @mcast1, 0x7}, {0xa, 0x4e22, 0x6, @rand_addr="e8503eb4b2f9483d4ad8bd81b1a389a6", 0x7}, 0xa2e6, [0x7f, 0x5, 0x4000, 0x6, 0x100000000, 0xff, 0x1, 0x2]}, 0xfffffffffffffed0)
setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5)
r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x227, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10220, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r8 = dup(r6)
ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc))
r9 = syz_open_pts(r7, 0x805)
r10 = dup3(r9, r8, 0x0)
write$UHID_INPUT(r10, &(0x7f00000036c0)={0x8, "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", 0x1000}, 0x1006)
getresuid(&(0x7f0000000180), &(0x7f00000001c0)=<r11=>0x0, &(0x7f0000000200))
r12 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r13=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r13)
setregid(0x0, r13)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x800000, &(0x7f00000009c0)=ANY=[@ANYBLOB="660500", @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303036303030302c757365725f69643d865b6d3ddfb6000000000000000000a7bbde93", @ANYRESDEC=r11, @ANYBLOB="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", @ANYRESDEC=r13, @ANYBLOB=',default_permissions,default_permissions,allksize=0x713a535f7a691d75,allow_other,max_read=0x0000000000000002,subj_role=,\x00'])
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)

18:06:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x48, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x84b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:09 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0xb101, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
statfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/92)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:09 executing program 5:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000640)={0x5, 0x0, [{0x0, 0x41c1f163, 0x0, 0x0, 0xfffffffffffffff9, 0xc300000000000, 0x3}, {0x0, 0x9d23, 0x7, 0x0, 0x0, 0xffffffffffff8001, 0x401}, {0xc0000001, 0x9, 0x0, 0xffffffffffff0000, 0x7, 0x26c0}, {0x8000000b, 0x4, 0x4, 0x7, 0x0, 0x3ff, 0xac}, {0x80000008, 0x3, 0x6, 0x4, 0x6, 0xcca, 0x7}]})
r1 = socket$inet(0x10, 0x3, 0xc)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd93cb94a01fc10ae, 0x0)
write$P9_RSTAT(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="680000007d010000006100000000100000040100000000000000f3ff000000008080a828dfa84379430e4cdf0e6bc99600000001000000fdffffff0700000003002f640bdaa5f0fd76380d64e59d48b1c70ed665762f70746d78000a002f6465762f70746d78000d0073656375726974792e696d61000d0073656375726974792e697a3ba79b0bac4939b602519a891b2a63d3333656c7ea96f1a89969d1f802fa99bd0cbdcb184101d432901228543dd83907e97daf37c9b62a6bf74c5e773dc8ecc32989536b4f3b3e230c4f5d14cd7a4f308ace5bd7cee3810467d5aea2db78d5c76ba925e1da920efcbab86713c602739e43c8b37e6dd2a40ca955"], 0x65)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000480))
r4 = syz_open_procfs(0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r5, 0x6)
time(0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0xa945557510a6b2cc)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
fgetxattr(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='trusted'], 0x0, 0x0)
setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r7 = accept(r5, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r6, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x1}}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000000840)=[{0xc8, 0x84, 0xfffffffffffffffe, "b809d6d438da814252b25a9fa8c8cfee80e03170543ca99f5663d2322206e674ca3cf479cca513bdc2e29ef3a97c55e7c0d58515462f0e0897a15b4936dfc8251cdd2db2f7cec05c36d41255d2e066419460f08e26a14de731c534a3d927ba42a6ffb0dc2d1005edd5e0e24759c785c9abb3e77b3b4fe4af0dce146f9c7f8d83ea6f75b3a695a53f0c440543fcae7a236e91f1638f84052367bfb5fea8264c3ce4d30a487dfcd68f38ce63b3058c2357a958"}, {0x70, 0x2b668a7ff4317c43, 0x32c2, "d6ad5192ea16ca8d40f90cbcae1fb7757ef66c9aab942a95d295415a21c48fe7165d1573321608646443c7ed1887760c4a98b815159abdf0b9233aa7b46d719b409790b3aa82c180dd616b64287836a2f2100654ca952c3358ff69"}], 0x138}}], 0x1, 0x0)

18:06:09 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x49, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x84c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:10 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:10 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x84d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:10 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x60, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:10 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x4)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0xff)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = memfd_create(&(0x7f0000000040)='lotrusted\x1a\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0)
setrlimit(0x0, &(0x7f0000000000)={0x10001, 0xfe})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070")
r6 = dup2(r4, r3)
syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x57, 0x0, 0x0, 0xfffffe0a)

18:06:10 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xe0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:10 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x84e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:10 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:10 executing program 5:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000640)={0x5, 0x0, [{0x0, 0x41c1f163, 0x0, 0x0, 0xfffffffffffffff9, 0xc300000000000, 0x3}, {0x0, 0x9d23, 0x7, 0x0, 0x0, 0xffffffffffff8001, 0x401}, {0xc0000001, 0x9, 0x0, 0xffffffffffff0000, 0x7, 0x26c0}, {0x8000000b, 0x4, 0x4, 0x7, 0x0, 0x3ff, 0xac}, {0x80000008, 0x3, 0x6, 0x4, 0x6, 0xcca, 0x7}]})
r1 = socket$inet(0x10, 0x3, 0xc)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd93cb94a01fc10ae, 0x0)
write$P9_RSTAT(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x65)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000480))
r4 = syz_open_procfs(0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r5, 0x6)
time(0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0xa945557510a6b2cc)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
fgetxattr(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='trusted'], 0x0, 0x0)
setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r7 = accept(r5, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r6, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x1}}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000000840)=[{0xc8, 0x84, 0xfffffffffffffffe, "b809d6d438da814252b25a9fa8c8cfee80e03170543ca99f5663d2322206e674ca3cf479cca513bdc2e29ef3a97c55e7c0d58515462f0e0897a15b4936dfc8251cdd2db2f7cec05c36d41255d2e066419460f08e26a14de731c534a3d927ba42a6ffb0dc2d1005edd5e0e24759c785c9abb3e77b3b4fe4af0dce146f9c7f8d83ea6f75b3a695a53f0c440543fcae7a236e91f1638f84052367bfb5fea8264c3ce4d30a487dfcd68f38ce63b3058c2357a958"}, {0x70, 0x2b668a7ff4317c43, 0x32c2, "d6ad5192ea16ca8d40f90cbcae1fb7757ef66c9aab942a95d295415a21c48fe7165d1573321608646443c7ed1887760c4a98b815159abdf0b9233aa7b46d719b409790b3aa82c180dd616b64287836a2f2100654ca952c3358ff69"}], 0x138}}], 0x1, 0x0)

18:06:10 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:10 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x300, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:10 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x84f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:10 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000540)=r6, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r6, 0x3}, 0x8)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:10 executing program 1:
r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x6)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x241, 0x0, 0x0)

18:06:10 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x500, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:10 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x850, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:11 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x3f00)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:11 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x600, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x851, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:11 executing program 3:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r0, r1)
r2 = dup2(0xffffffffffffffff, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r4, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/4096)
r6 = socket$inet6(0xa, 0x80001, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r9 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r10 = dup2(r8, r9)
fstat(r10, &(0x7f0000001340))
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e1c, 0x40b6, @dev={0xfe, 0x80, [], 0xc}}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r6, r7)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000001380)={'bridge_slave_0\x00', 0x2a0, 0x1})

[ 1293.143566][   T26] kauditd_printk_skb: 24 callbacks suppressed
[ 1293.143580][   T26] audit: type=1804 audit(1568484371.390:3959): pid=26329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1389/file0" dev="sda1" ino=16498 res=1
[ 1293.263327][   T26] audit: type=1804 audit(1568484371.510:3960): pid=26329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1389/file0" dev="sda1" ino=16498 res=1
[ 1293.289791][   T26] audit: type=1804 audit(1568484371.510:3961): pid=26329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1389/file0" dev="sda1" ino=16498 res=1
[ 1293.328019][   T26] audit: type=1804 audit(1568484371.570:3962): pid=26329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1389/file0" dev="sda1" ino=16498 res=1
18:06:11 executing program 5:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a78022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x31}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000001c0)={0x3, 0x6})
r2 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)="4e5c7bf2b8167980983ee813f5d7e156c35935dec415b13a3e5f021be3dbbaa1c97cfb2b8c30489839d5486f6b257651c317e2835d3a46c0961139cbe183e84541fe7227229e13f24a8ae940adf4352161b58232e422d639652353d755e4f9b7b12e32f213dd5db1dc5e22ef25805e0e5ac0abf15f033f356e9363a760aac36f242a9d9c7dccf1132979fe21e53d396a9edb5e10bf5f80170126f95c6c8f07c803790770a24c67693d8dcd84ccc9b03dbe26d2199429ae0c974d27cc9e9d0d55c3db818fd9dcb0ff5fb5e8f35438a70d4ecdf0b4f7e5f73ff618657434afe9972e803ce33af0e3dfc7d3eb9862c74fe59a6cc56c83c1dd49ee1fdf664833", 0xfe, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2)

18:06:11 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:11 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x700, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:11 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
r3 = fcntl$dupfd(r0, 0x40bb881ebdf520fb, 0xffffffffffffffff)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xa)

18:06:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x852, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:11 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x1, 0x3, 0x5, 0x9538, 0x0, 0xaed, 0x400, 0x1, 0x6, 0x1f, 0x6, 0x1ff, 0x7e73, 0x7, 0x8, 0x9, 0x5, 0x8, 0x8000, 0x7ff, 0x2, 0x1, 0x8001, 0x4, 0x1, 0x1, 0x5, 0x3, 0x0, 0x5499, 0x6, 0x0, 0xfff, 0x6, 0x3a404400, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0xf}, 0x12000, 0xfff, 0x0, 0x7, 0x7, 0x0, 0x7})

18:06:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x853, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:11 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x900, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:11 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xe0ff)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:11 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0xffff, {{0x2, 0x4e23, @empty}}}, 0x88)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x480000)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000080)=0x54)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfffffdef, 0x11, 0x0, 0xffffffffffffff84)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8)

18:06:12 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
fstat(r3, &(0x7f0000001340))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x800, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
accept4$ax25(r5, &(0x7f0000000240)={{0x3, @rose}, [@default, @netrom, @null, @null, @null, @rose, @rose, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000)
r6 = accept4$alg(r0, 0x0, 0x0, 0x80000)
dup2(r6, 0xffffffffffffffff)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1}}, 0xc)
r7 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r7, 0x0)
ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, &(0x7f00000002c0))
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r9, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={0x0}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)

18:06:12 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x9, 0x140280)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:12 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x854, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1293.858120][   T26] audit: type=1804 audit(1568484372.100:3963): pid=26378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1121/file0" dev="sda1" ino=16834 res=1
18:06:12 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xffe0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:12 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xa00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1293.983191][   T26] audit: type=1804 audit(1568484372.100:3964): pid=26378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1121/file0" dev="sda1" ino=16834 res=1
18:06:12 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x855, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:12 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1294.108474][   T26] audit: type=1804 audit(1568484372.100:3965): pid=26378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1121/file0" dev="sda1" ino=16834 res=1
18:06:12 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r3, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x265, 0xfa00, {&(0x7f00000000c0), r1, r0}}, 0x163)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={<r6=>0xffffffffffffffff}, 0x13f, 0xdcd3ce8486940517}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x5, 0x548b, "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", 0x27, 0x4, 0x8, 0x908e, 0x0, 0x0, 0x400, 0x1}, r6}}, 0x120)
getpeername(0xffffffffffffffff, &(0x7f0000000440)=@l2, &(0x7f00000004c0)=0x80)

18:06:12 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xb00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1294.206674][   T26] audit: type=1804 audit(1568484372.210:3966): pid=26378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1121/file0" dev="sda1" ino=16834 res=1
18:06:12 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000140)=0xff)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:12 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x856, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1294.381462][   T26] audit: type=1804 audit(1568484372.210:3967): pid=26386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1121/file0" dev="sda1" ino=16834 res=1
[ 1294.492683][   T26] audit: type=1804 audit(1568484372.230:3968): pid=26378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1121/file0" dev="sda1" ino=16834 res=1
18:06:13 executing program 1:
r0 = socket$inet(0x15, 0x80804, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x1, @dev}, 0x10)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x2)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000200)={0x5, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @empty}}}, 0x108)
r6 = dup2(r3, r4)
fstat(r6, &(0x7f0000001340))
ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000000))

18:06:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x1000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:13 executing program 5:
setgroups(0x0, 0x0)
getgroups(0x4000000000000285, &(0x7f0000000100)=[<r0=>0xee00])
socket$nl_generic(0x10, 0x3, 0x10)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000400)=0xffffff27)
setregid(r3, r0)

18:06:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x857, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:13 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0x1c00000000, 0xffffffff, 0x200a, 0x2, 0x7, 0x1, 0x0, 0x3}})
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xd00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x858, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:13 executing program 5:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800)
fcntl$setlease(r1, 0x400, 0x2)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000000c0)={0x100000, 0x4000, 0x0, 0x4, 0x10001})
r2 = dup(0xffffffffffffffff)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='/wlan1user\x00', 0x0, r2)
sendto$inet6(r2, &(0x7f0000000140)="fd5e077595a4f2235232a0502395a1b624feaef685e5f1430e8361181d11d6141f25f3622b8eb071ab943d3a9b62e91a954d32848d23b1a65beb2be50cbf957b78bd0ebcc9ca0f973930500b444c46330e073fc7f33dc9244e0212c1a3ccb1ebe7fd8bcafdabb6ae0105e6459432619b6a8c9b5e2cd521d7f6a505de6ef417ab6766aec56f358a338a53588b6532172e411ffc9ebdd4c3ca27fc0ab47a6c3465f713a14deb69d3780ce3cba3699b0070fbb865b88399100f07d4b0e4edf6f6538ede1b3f823242196dd42df1f07e4d003833", 0xd2, 0x2c008000, &(0x7f0000000240)={0xa, 0x4e20, 0x3f, @rand_addr="b3516455ec568f6cdf4b8e9e3ad241ea", 0x9}, 0x1c)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685, &(0x7f0000000400)={0x1, 0x4, 0x1000, 0x9d, &(0x7f00000002c0)="8ff9e54f2b158089773fe33b3961d6358f9fa72e0b5ecea88e37107958b7aa0e25fbfafd3b82eeeff737c3029ae4405cc832937847d86d623b772f8a5bc7b2a3b7b078b85547c6d31d671875599f8e7ef27be245dd545c833e8eff95c313de5668a34b892b3d138cdfbeb306b83b78cc925bf89b75121b5b1a9c328d4d3a4957b782b570b78401fc85996e2855ed71ec229f0bba46301384ab743b75fc", 0x72, 0x0, &(0x7f0000000380)="9d17cad900807ec1bab8acf635e83d4ce1ff16b1feb2ff226a6dfbdd15d1d5816cc324caffe9d567cf1d971d996454e57cb46edb051e0af2b55079c5e3f44a704c04e12d6b3dddf591e5426f45231e6896cc8467e870d4cfe605d47d6990bf3008d3123e428f4617b33187697c1d9d676d83"})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0xa0000, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000500)={0x0, 0x1, 0x6, &(0x7f00000004c0)})
r5 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00')
write$P9_RXATTRCREATE(r5, &(0x7f0000000580)={0x7, 0x21, 0x2}, 0x7)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=<r6=>0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x9, &(0x7f0000000600)=""/149)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ubi_ctrl\x00', 0x2000, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000700)=0xffffffffffffffff)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000740)='cgroup.type\x00', 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000780)={0x9, 0x8, 0x5, 0x10000, 0xffffffffffffff01})
r8 = getpgrp(r6)
kcmp(r8, r6, 0x6, r3, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x200000, 0x0)
r9 = syz_open_dev$media(&(0x7f0000000800)='/dev/media#\x00', 0x9, 0x20000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r9, 0xc040563d, &(0x7f0000000840)={0x1, 0x0, 0x2, 0x4, {0x6, 0x8, 0x1, 0x8}})
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000880))
r10 = open(&(0x7f0000000980)='./file0/file0\x00', 0x402840, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@sack_info={<r11=>0x0, 0x7}, &(0x7f0000000a00)=0xc)
setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000a40)={r11, 0x3}, 0x8)
r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/btrfs-control\x00', 0x200000, 0x0)
write$ppp(r12, &(0x7f0000000ac0)="228f51b037b2bf1a21cd2f1ad0d1d51f6b5ede889174d30660305ba0ed13bfd112672ad5b26842079e9ecff13d2d4ff730c2c3ada121868db42ab8c8a4f99ed16ab7cd14340e18cf56e7187399ebbfe0934bebfc64dfe332651be3b58793d668295fb4b2ff5c58ac2426ba29d265688d85f7f4b13e74f3f77a224f65a6ea86992742dca0cf17fb6c952298c64d790b0ef71bbebe1671b302a87a8f7e127e3b70205d017a0c4fd4df0833bb4269a78a1f9f143789", 0xb4)

18:06:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xe00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x859, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:13 executing program 1:
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa1f40001)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002680)={&(0x7f0000002640)='./file0\x00', 0x0, 0x10}, 0x10)
fchdir(r0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x7e5})

18:06:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x3f000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:13 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
read$char_usb(r2, &(0x7f00000001c0)=""/109, 0x6d)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x85a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xec0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:13 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000))
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0xfff, 0x5, "1778d12ec1"})
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000))

[ 1295.321772][T26498] futex_wake_op: syz-executor.1 tries to shift op by -192; fix this program
18:06:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x85b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1295.442123][T26498] futex_wake_op: syz-executor.1 tries to shift op by -192; fix this program
18:06:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:13 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={<r9=>r8, 0xfff}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x2, 0x5, 0x8303, 0x5, 0x5b, 0xfffffffe00000, 0x5, 0xfffffffffffffffd, r9}, &(0x7f0000000240)=0x20)

18:06:13 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x101000, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0)
write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
ioctl$CAPI_REGISTER(r0, 0x80024321, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r6, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x800, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r10=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000540)=r10, 0x4)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={r10, @in={{0x2, 0x4e20, @rand_addr=0x9937}}, 0x1000, 0x3695, 0xffffffffffffff00, 0x9, 0x4}, &(0x7f0000000140)=0x98)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000003c0))
r11 = getpid()
fcntl$lock(r5, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r11})
ioctl$RTC_SET_TIME(r6, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000380)={@remote, <r12=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r6, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r12, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1c}, 0x73, r12})

18:06:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/114)

18:06:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x85c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:14 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xe0ffffff)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:14 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1100, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:14 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xffffffe0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:14 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x85d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:14 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1115, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:14 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000000000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:14 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x2f, 0x5, @thr={&(0x7f00000001c0)="5c4fbc742bdc80a1c7214d1cb504101568d2f0210e0480b4f162a94e2bcd584fe11e5639e3befe3bf8ec1a5755bfe8806a00b554d91a3e3f1831b58f0f2260409f9944392e", &(0x7f0000000380)="489b09e4e947c0c9c7725cb77ff6f7778b2a77171ecb97e4c155ceaa96986e229a829779d2a78b5728507bda3bcdbd72d68c5bca4bfda0272b96bfc172041856683cd05f80ea6024adcf0bc80e8b23fc3d4c5ddf61e8be20ba69db6a61d6e4143cdb81650205352165b51e7bdb0984d8816b4af918245d79b0ba7c1926f23ac54b17ffd8607f0178d0378d6ab67b5f39a0b9cb841252c87c40d0436ea160ffa55a6d01f4bf4cfe4b4a9abb00642f31af23363de64dd1aaaa1a"}}, &(0x7f0000000240)=<r4=>0x0)
r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r5)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={r8, 0x1ff, 0x8, 0x1f, 0xa71, 0x9, 0x7, 0x2, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x8}}, 0x2, 0x2112, 0xffffffffffff6561, 0x7, 0x3cfd9ed}}, &(0x7f00000002c0)=0xb0)
timer_delete(r4)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:14 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1200, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:14 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x85e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/114)

18:06:15 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x100000000000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:15 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1300, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x85f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:15 executing program 3:
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f00000001c0)='/dev/loop#\x00', 0xffffffffffffffff}, 0x30)
r1 = getpgid(0xffffffffffffffff)
get_robust_list(r1, &(0x7f0000000400)=0x0, 0x0)
perf_event_open(0x0, r1, 0x4, 0xffffffffffffffff, 0x8)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20003c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0xb6b0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x24}}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340))
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000140), 0x4)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:15 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
munlockall()
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x200, 0x0)
getpgrp(0xffffffffffffffff)
r1 = getpgid(0xffffffffffffffff)
get_robust_list(r1, &(0x7f0000000400)=0x0, 0x0)
r2 = getpgid(0xffffffffffffffff)
get_robust_list(r2, &(0x7f0000000400)=0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0})
dup2(r3, r4)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
r6 = getpgid(0xffffffffffffffff)
get_robust_list(r6, &(0x7f0000000400)=0x0, 0x0)
r7 = getpgid(0xffffffffffffffff)
get_robust_list(r7, &(0x7f0000000400)=0x0, 0x0)
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r9 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r10 = dup2(r8, r9)
fstat(r10, &(0x7f0000001340))
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000280))
get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0)
r11 = getpgrp(0x0)
r12 = getpgid(r11)
r13 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
getsockopt$ax25_int(r13, 0x101, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
get_robust_list(r12, &(0x7f0000000400)=0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e)

18:06:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x860, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:15 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2000000000000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:15 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1400, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x861, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:15 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r8}}, {@measure='measure'}, {@euid_lt={'euid<', r9}}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, <r10=>0x0}, &(0x7f0000000680)=0xc)
r11 = geteuid()
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000200)="cdf9c04b0e2d6a0bb434f4da02c8380405355e06d431a00a2f750fe8d7a9b3f4d7726e23ffb326c604ac9cca7bccc8c0b3f9edc4e9bb7f45d93c2f911c705d34d9f81c71bffe778a7d254ee7a4f1ba4b1d6f8ca31466908781a137d483e31f31f425a218832f6372574f4102bba581d1e8044f9eed6aeb296531d3", 0x7b, 0xfffffffffffffff8}, {&(0x7f00000002c0)="c34733ecff4b8309528c79975ff7d030ded6306992039a3ae1373d1b7f17bd515fb146e27ab5f548edea41bf2c0bfa3b9241b319936637a81d0f8c12bc547415c6b131fbc417a37e8db7604cad933de55c3a0e6d7cf81984dde180b0fc6883324c904078f6380502c47063dfb6cf26013b197fa8", 0x74, 0x270f40e6}, {&(0x7f0000000380)="ce42bb97c699cb085cac3dd1f0290cfc49dce7fc2844ac477944ed2759509eec2b4f6170462326a9ae188a31134291107b3680553c35a570a9b0cf1c5b11aad0ed77381b3d8ea8efb855e32f005189c383240de980cc6b70f0f8544db01aec5dbd680c3eb7a39ba0e4b5659d36f1e54a9450ecec33f8e20c12166d2dfbdb043a4651c26813cb78b5a1deaf4ef0935249590d1d975b40057c51ff9ecf22e998bc64708010f7eeef7081bba4834dcf1935540eb5931f92e7f291a1e6372549d18222526c47", 0xc4, 0x3}, {&(0x7f0000000780)="9cb261bff20ceca08abf7311b30e9cfb0d4a46566a0c8c67ab26a5c3611732008469d8e81905446e976e86981df3f0f4171d48ddcc0ff3ba7efc8ab8da508114f6648eab1fd58f67332cc458726293bea46e893a7db11351968e39fabc5617eb382ea6e442088bcc2e4a3c65ea0c68cd225c3f1e8a33b555f689c7db58cac055b65d0918e044aa3bce5840976cda91712491cc17e73a4b71cbeda59f4ee1050532cea20f06bd56a8d7f9e42b6e59b8895c3ae857ad3fd16074fbd8e70500ed4fc2d04db08f1b482df80a89373e38d67af2c810de5b770a1456a4ed729a37255e6dd42a9fba3aef76cf6bab557804d24d21731933bf157649a62889178ded9baa6d63d9f185fc7fdeeecbb0342ec805e948b8d44afedc8953544b4b39b12e89406bd37eaa404620c432d742a8f51f4297834b1704b4a09b36c9f2c81cb40b2bc7d77df326e48bb98b68fadf87ef3530b8ee4911a374f3829f1fa2cae139583c2b1949733e0e59d93089d60e6af872862deec790516b733a69716f34f8bec07eb286f7cf0c108f9bcded3de477f3e7fa4f0d85d4b02d38a44ffd5facaec2df7096a3be3e403ee30704c66287b4e6aa60009c8a6ea8d5f142235a9f0a071cc369d532ef9fda3e3ce7c85b039b81d26a3e2eb40db32129847ed5d37e4ef2721c976207f4e992672ade357b572f53a0", 0x1ed, 0x9}, {&(0x7f0000000540)="490e915178f53401604bf3c18d51b54f4a63929aac49e619aa89bc5e19920d63536d940312b337a57fd78de236eeafd4f2ff2f0c42aeec07a747bd4f0c82c98c6fbb190c9422d8655463f6", 0xfffffffffffffec7, 0x1}], 0x2, &(0x7f00000006c0)={[{@fat=@discard='discard'}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8no='utf8=0'}, {@numtail='nonumtail=0'}, {@rodir='rodir'}], [{@uid_eq={'uid', 0x3d, r8}}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, r10}}, {@fowner_gt={'fowner>', r11}}, {@subj_role={'subj_role', 0x3d, '\x00'}}]})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:15 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x3f00000000000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/114)

18:06:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1500, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:16 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0)
mq_notify(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x800, 0x410200)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r3, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000003c0))
r4 = getpid()
fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r4})
ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000380)={@remote, <r5=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r3, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r5, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0x2b}, 0x4e24, 0x7, 0x4e21, 0x6, 0xa, 0x20, 0x20, 0xc, r5, r6}, {0xea21, 0x18000, 0xcfa7, 0x800, 0x8, 0x100000001, 0x5, 0x880}, {0x80000001, 0x81, 0x7, 0xfffffffffffff000}, 0x7, 0x6e6bbc, 0x0, 0x1}, {{@in6=@mcast1, 0x4d6, 0xa4e45f0b10ab7fdb}, 0x2, @in=@remote, 0x3503, 0x1, 0x3, 0x81, 0xd933, 0x3, 0x8000}}, 0xe8)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
dup3(r7, r0, 0x0)
openat$usbmon(0xffffffffffffff9c, &(0x7f0000000400)='/dev/usbmon0\x00', 0x400000, 0x0)

18:06:16 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000000000000000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x862, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1297.768656][T26640] FAT-fs (loop3): Unrecognized mount option "hash" or missing value
18:06:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1511, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x863, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:16 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(r0, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x4002)
io_setup(0xc32f, &(0x7f0000000440)=<r2=>0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
stat(0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x3, 0x5, 0x2, 0x8, 0x10000})
ftruncate(r1, 0x48280)
r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r4, &(0x7f0000000080)={0x35a, 0x69, 0x0, {0x0, 0x0, 0x3}}, 0xfffffff4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe04c5755550000, 0x0, 0x1, 0x10001, r1, &(0x7f0000000800)="371d848c24591792863b2d5d6bc3c76a000001000000000079e6ae1a07de1d42fd46fdfada485aaea1cda588838353786b2ff4f7b644e0839054fcd3486dfe9795b35eae35042b0ae441065b6570a16e9f59424cf705c5958d33fbfcec4080876e65ccb6cc4a9a8e6a0f46559eb725fdab41865ab93895a77a3e494f920e9617dc006dcbe35e9ff7112f2a58bbd9f7123b6661186821900b092f90a53e27d726e56671cc23bf1472b65c3131051de54ab9b1fe6b7b515163790da97ebdaf688dc5b30aed84cbb5c86c3c0a64548106e6a4bfd61442897160333d8ad0b914906fb8839422a3", 0x2c84e1972a71ed36}])

18:06:16 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xe0ffffffffffffff)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1298.165852][   T26] kauditd_printk_skb: 27 callbacks suppressed
[ 1298.165867][   T26] audit: type=1804 audit(1568484376.410:3996): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1129/bus" dev="sda1" ino=17299 res=1
18:06:16 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xffffffffffffffe0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

[ 1298.302775][   T26] audit: type=1804 audit(1568484376.430:3997): pid=26680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1129/bus" dev="sda1" ino=17299 res=1
18:06:16 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @local}, {0x6}, 0xd646bfd4119bbe80, {0x2, 0x4e22, @local}, 'ifb0\x00'})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2000, 0x0)
ioctl$TIOCSTI(r5, 0x5412, 0x3)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1600, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1298.612480][   T26] audit: type=1804 audit(1568484376.860:3998): pid=26690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1129/bus" dev="sda1" ino=17299 res=1
[ 1298.642515][T26680] syz-executor.5 (26680) used greatest stack depth: 22712 bytes left
18:06:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/114)

18:06:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x864, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:16 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x9)
close(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0xa2)
close(r2)

18:06:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1700, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:16 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
r3 = getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r3)
r4 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r4, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)

18:06:17 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(r0, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x4002)
io_setup(0xc32f, &(0x7f0000000440)=<r2=>0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
stat(0x0, &(0x7f0000000100))
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x3, 0x5, 0x2, 0x8, 0x10000})
ftruncate(r1, 0x48280)
r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r4, &(0x7f0000000080)={0x35a, 0x69, 0x0, {0x0, 0x0, 0x3}}, 0xfffffff4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe04c5755550000, 0x0, 0x1, 0x10001, r1, &(0x7f0000000800)="371d848c24591792863b2d5d6bc3c76a000001000000000079e6ae1a07de1d42fd46fdfada485aaea1cda588838353786b2ff4f7b644e0839054fcd3486dfe9795b35eae35042b0ae441065b6570a16e9f59424cf705c5958d33fbfcec4080876e65ccb6cc4a9a8e6a0f46559eb725fdab41865ab93895a77a3e494f920e9617dc006dcbe35e9ff7112f2a58bbd9f7123b6661186821900b092f90a53e27d726e56671cc23bf1472b65c3131051de54ab9b1fe6b7b515163790da97ebdaf688dc5b30aed84cbb5c86c3c0a64548106e6a4bfd61442897160333d8ad0b914906fb8839422a3", 0x2c84e1972a71ed36}])

18:06:17 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x865, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:17 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1800, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1298.943134][   T26] audit: type=1804 audit(1568484377.190:3999): pid=26729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1400/file0" dev="sda1" ino=16747 res=1
[ 1299.045109][   T26] audit: type=1804 audit(1568484377.260:4000): pid=26729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1400/file0" dev="sda1" ino=16747 res=1
18:06:17 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:17 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x866, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1299.161691][   T26] audit: type=1804 audit(1568484377.360:4001): pid=26728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1130/bus" dev="sda1" ino=16518 res=1
18:06:17 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1b00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1299.240080][   T26] audit: type=1804 audit(1568484377.410:4002): pid=26728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1130/bus" dev="sda1" ino=16518 res=1
18:06:17 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x867, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:17 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1c00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:17 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x868, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:17 executing program 3:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fstat(r2, &(0x7f0000001340))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
mknod(0x0, 0x0, 0x3)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x19b342, 0x0)
setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000001c0)=0x9000000000000000, 0x4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:17 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
set_tid_address(&(0x7f0000000040))
r3 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r3, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000000)={0x0, 0x1a, "718cf5908868d36187828fe3a1dd8f2261219ca5119fb6e81e5f"})
close(r2)

18:06:17 executing program 5:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, 0x0})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000380))
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = socket$inet6(0xa, 0x3, 0x80)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
fstat(r5, &(0x7f0000001340))
ioctl$CAPI_INSTALLED(r5, 0x80024322)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote, @dev={0xfe, 0x80, [], 0xc}, @remote, 0x100000000, 0x3, 0x7, 0xb32e218221594469, 0x39})
setsockopt$inet6_int(r2, 0x29, 0x5, 0x0, 0x0)
syncfs(r1)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x6, 0x5}, 'port1\x00', 0x0, 0x20, 0xffffffffffffff01, 0xb7a, 0xffff, 0x3ff, 0x1, 0x0, 0x5, 0x6})

18:06:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x869, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:18 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1d00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1299.832508][   T26] audit: type=1804 audit(1568484378.080:4003): pid=26774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1402/file0" dev="sda1" ino=17326 res=1
18:06:18 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = gettid()
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x20, 0xf302, 0xfff, 0x3, 0x0, 0x1, 0x0, 0x4, 0x5, 0x45, 0x1, 0x3f, 0x5, 0xfff, 0x6, 0x1f, 0x1, 0x0, 0x4, 0x3, 0x8, 0x1, 0x0, 0x2, 0x3f, 0xb504, 0x3f, 0x2, 0x80000001, 0x1f, 0x4, 0x401, 0x7fffffff, 0x1f, 0x6, 0x5, 0x0, 0x4, 0xd, @perf_config_ext={0x3000000000000, 0x72}, 0x8044, 0x80, 0x3, 0x7, 0x13, 0x3}, r3, 0x9, r6, 0xf89d382061d54400)
write$cgroup_int(r1, &(0x7f0000000000)=0x400, 0x304)
close(r1)
close(r2)

[ 1299.944430][   T26] audit: type=1804 audit(1568484378.080:4004): pid=26775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1131/file0" dev="sda1" ino=17330 res=1
18:06:18 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r0, r0)
ioctl$TIOCCONS(r1, 0x541d)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000000)={0x6, 0x0, 0xc37, 0x1})
getdents(r2, &(0x7f00000000c0)=""/4096, 0x1000)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000010c0)={0x0, 0x0, 0x6, 0x0, [], [{0x401, 0x6, 0x36afc87f, 0x0, 0xc015, 0x3}, {0x1ff, 0x8, 0x2, 0x40, 0xfff, 0x9}], [[], [], [], [], [], []]})
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000080)={0x1, 0x4})
getdents(r2, 0x0, 0x0)

18:06:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x86a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1300.111052][   T26] audit: type=1804 audit(1568484378.180:4005): pid=26775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1131/file0" dev="sda1" ino=17330 res=1
18:06:18 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1e00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})

18:06:18 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
chmod(&(0x7f0000000140)='./file0\x00', 0x40)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:18 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xc87e81715987ffb3)

18:06:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x86b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:18 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1f00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:18 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x6, @vbi})
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x5)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={<r5=>r4, 0x400000000040, 0x20, 0x11b3, 0x8, 0x9}, &(0x7f0000000280)=0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x9}, &(0x7f0000000240)=0x8)

18:06:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x86c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:18 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x140)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x86, 0x8})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:18 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:18 executing program 5:
r0 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r0, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x5, 0x0, [0x4, 0x9, 0x40, 0x1, 0xffff, 0x200, 0x706, 0x100000001, 0x7fff, 0x200, 0x7fff, 0x9, 0x2, 0xfb, 0xffffffff, 0x8]}, {0x8, 0x0, [0x2, 0xe3, 0x6, 0x3, 0x2, 0x1ff, 0x1, 0x100, 0x4, 0x0, 0xeb53, 0xfffffffffffffffc, 0x0, 0xff, 0x9, 0x9]}, {0x26, 0x0, [0x6, 0x0, 0x4, 0x2, 0x8, 0x40, 0x1967, 0x9, 0x5, 0xfffffffffffffff8, 0x2, 0x6, 0x1, 0x8, 0x98f, 0x2]}], r2, 0x1, 0x1, 0xd8}}, 0x20)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0xc0000101, 0x0, 0x40000080]})

18:06:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2100, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:19 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
perf_event_open(0x0, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000140))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})

18:06:19 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x86d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:19 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000002c0)={0x13, 0x10, 0x7, {0x0, r4, 0x1}}, 0x18)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r5}}, 0x18)

18:06:19 executing program 5:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
close(r2)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="f7b79357a49cfa9220a42b2395b167baff03e989d8e2f80f7c580e9c35241352a34a63486ad0bc44a34ae9551cb8655b4e355dbca05815faa739954f4d721a400daeaa77b8c6957d1439b8ccdb4dd1cf57", 0x51}, {&(0x7f0000000080)="42a3b78e4a9cedde01d064eb8faf4dcf943f421bc397e7e5da359ed4dfc16bb3afd007e5cd7fb22759de0f47f2613f27509992dc54eb18b91ecb7670", 0x3c}, {&(0x7f0000000100)="2ae7362288516e2da950bec540c8462d3309e040763d32cec59b67219ad355d79478d51853b787feabf41cb079933b98528c37a84500a3068ee4393e60ec731f8908fbfe58a5699e02abdc8d2ca234260ebf01479d4511b38d41e3f13e75c0839a5b716e9298a60552f0", 0x6a}], 0x3)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000002740)='/dev/snapshot\x00', 0x123001, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
fstat(r5, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r7}}, {@measure='measure'}, {@euid_lt={'euid<', r9}}]}})
r10 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r10, 0x0)
write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="c1c52a8e42988f88f75502bac35cdf2a226f789a668545accf4a646cc9b20b8878d761e2966ce5e570b41724d55bf288f12e14ae5d536f8a48152f665f958b0393491eab73780cf317188426af6fff558984a2b6bf5c99f058a183f3b8fa886341802094696e497a78addc118e26ee77641e192088897ccced2b70be7bd4c39b94b093a58a5c5766f59d2e5a4ba48af20b63d96baea046d467e838ed05cd9970a2648908e5d42c67a5e6e1d2d59d6ec5c7f741301da7c0ba30a0439b8b6fa12e528586227be58e176f9ca6e058cf69152a08947ad504aa0910c1e8818721d58da22d337deb572dd716ac68a89ce20a9c1b26ad5d85f54ffc87", @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="4271d1b826faf6df04db57421dcb0379d6ea76d7d7082d37cc558a034ce02eb1d2de9278b41a8e39de1d63fab8d2114d27db3fbdea917ee137a8fceff5a7f20354d6f653d50cfcbf96806df49e528698d8ca03aaab7029c2a90220fab5a83868271698f3412b5cd6b10a04bc501d55b97cc1edc4dcf647e14a6a91c24d7436d9eee4ca024be7111790cf6ad42900e117a49c6514a014e621e1229f2bc430b4b880709e879a247a91bc5ce40d8f438ad949bf87515b009b890361dc19e26188927d9a79c41ff1e6e00db0bb3a07b8eab83a3572652cb71339f6a10aadd653badc6d147b66a07af9ea85f48a3c38ebd7f4bdf0d536e1f760cf46c47c5000735d8e749f93a42a7c63ed80645d31b4115bf7a1b5bbf5a1226604d5dda641", @ANYBLOB="b5751218b8325caedd1c66bc7ba07c9b53f36c92556fad04addf008a2d8078afc4f679ebabbd0042c2b2454b74e4787aebd0b8aaaa27fcd0d6833cb198f51d43df7189dd5847cfe9ec49c4a78f22525f6c8db0599da65b29a081f963bc040d5178872d874adcfa48acb03db837d6eaf66111293624faf3a24f8b0a3ffe80c79fc2da8f817b6374ae4613f53f6550004085edef4fca40a2f547972b5f477b51fe32b345849042321e2c951f2861c158ad653385a2d3258f724f0ebdadd4e6e358aef40ee13982dc1d32b4c29e6231a1dc00cca2d4d35cc0d6fbd18949782cdf32b147a6a29362b3f3d573592498b47d98c6c3", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r8]]], 0x101)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r12 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r13 = dup2(r11, r12)
fstat(r13, &(0x7f0000001340))
getpeername$unix(r13, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e)

18:06:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2200, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:19 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x4, 0x7, 0x2, 0x8, 0x19, 0x3, 0x1, 0x1, 0x1, 0x1})
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2300, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:19 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x86e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})

18:06:19 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
getdents(r1, &(0x7f00000000c0)=""/240, 0xf0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
getsockname$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000040)}, 0x10)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x100, &(0x7f0000000200)=0x4)

18:06:19 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000c00)='/dev/audio#\x00', 0x0, 0x8881)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001300), &(0x7f0000001340)=0x4)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmmsg$nfc_llcp(r3, &(0x7f0000001200)=[{&(0x7f00000001c0)={0x27, 0x0, 0x1, 0x4, 0xbb, 0x5, "48041fe004224db8f082cb483ff25e802b5bbeac7ab0ec8f9b3ab4de4612b807cb17b3595d0c01903fa4fc4d8dcbb182172972be467943ab9c28a505c69fdc", 0x24}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000140)="5279b7c304", 0x5}, {&(0x7f0000000380)="b90e96f708d13e079bac0ffdd9429505c3d823740889b5b60462e39142aab5efc441917d33cdda9846c7a36beb843c59901ca7bf7c7e999dd38b14f9743650f0aa0612ee3004cf5d67a8563eae0bc7a6becd952a6499ad570ce3ffdad4e2e7c6584207048bb428bfdfcc98e82ba6926f982137a9abef59d672101cfd4b35f1276d", 0x81}, {&(0x7f0000000440)="61bc3f29ca98005d18a2cf1a7f57b5d446b916587b3ae02c93d9975f4a919b3cfad547a7430275f2760c355875ffeaceb6bbb29ed8a56f8eeb9088b6b21ac63c0bc03d5b036a2a16de7c4328d2f70e870bbff2847dca33556635ccfa3af2b1768fac117a5ed31319883d4eb67970ba9c2f31ed85845aeca617b09337155b1cfdaedbedaa8cb311bedc6bfa9b3f70f112cf5f2d5cd461d34ff4fde36c932efa9af005397c9c460bb3308bbdbb7219e05fda64249f2e14d9d5e1c88dd516fb76", 0xbf}, {&(0x7f0000000240)="eec1298ad2287f4663b71dfe70824b87809cad66b0589ffde8535b0db32cb980bdafe650aa189609bdc7b1678b982e3c49562f5a3cd7b394bb84e2c89291", 0x3e}], 0x4, &(0x7f0000000300)={0xfffffffffffffff0, 0xcd858628794fd274, 0x7, "74e1eae5cf854d4b69c9f102a28cc9ff"}, 0xfffffffffffffc74, 0x2399a85bfdebbc8}, {&(0x7f0000000500)={0x27, 0x0, 0x1, 0x4, 0x1, 0x400, "4931be0d32b9c6c785eb3c9c505de649e5ec72c960412723efff9b790315228e986320693a1f6e6e29e19dfadc4b578cfbe5d93cf488461fd6c639a1c1b2d2", 0x3f}, 0x60, &(0x7f00000007c0)=[{&(0x7f0000000580)="b69f5db9f2cca66f3e08c6b948b920dda26b9ae23b1b738b57c01496c5f03bfb2b2faa36ca2a12bd3648b52f7ab892230b768dc9a5f5b3b5c6547b9e038808ae320444413ae14ed62c41c81cc5b4f678538a8f1c49bc64899a3502ab2b7f82bbb66e36c112cae2edc2", 0x69}, {&(0x7f0000000600)="0942e5be6509d48f1ed3c5275bf0ed4ca18a880e0f23f39059fb259d72686a1e03f5fea4e5ba42362da38917d5b9a8605a5f29968c7b7492522872c168599544fa8e50a73964b590c9c9cd7a83521fc18122b40c9538a6e487662e094224e034d070aa9d599087b0e2e54a8a6b2f5ba67aa4d3e2321a6d9ec9788fb443d27fb9ffc5", 0x82}, {&(0x7f00000006c0)="24f29b8f71d7504929e1bb1fc095ef5c7451abf15c0f0af3d51767cdde56892af3fa60241de385eb823199b056402c9c94ef17ac6e71d9c023bb4f897766caa83ca90809dd439bfa85fe2ea03455c254f8fb1124929ccb66598c90fa2086b68920aed1f54ba02a4227dd078cb6c7c5d881e6647d1c0c58877ea195da251972c0efebd3081e7e127980076a9be9a2bf228aa902a3f7a8a6f0e9c50448178aa54dfee51d1a2b24a4e3d61f881c73774a2c6657f09ddefc2915bd0c046e0e8be216492b5be3fd4008cb262147ac85267fe3", 0xd0}], 0x3, &(0x7f0000000800)={0xc8, 0x104, 0xb9, "3f6251068d10b0a24683b621c444455195832915d4fb4baf3c8d0ebc25a5ac97a2ffb8899636b6fe0284308a05051c495a8e8122237fde4f97007288ccc6806574bfceeb9adcaf6942c4b99d9c52097ba6e6103de04c96e643c612a520984ccf4342bf22887bcdd8acf92f91e43126714316ffc9a5eee31a372340a5d5f5d9d517742743e99243f5e92b1c0ca4a978893d55e7daa19d9bbadf3309e025c0ad9469317263227ff0a863199c146786162145a16b"}, 0xc8, 0xaeea2edb50ae6113}, {&(0x7f0000000900)={0x27, 0x1, 0x2, 0x4, 0x4, 0x100000001, "e6abf3e53c12eccbd4bc82a0ad0267975e17693883f0c941504d0b3d25c5eb0254c3a82a8a92448b89b811d9b8b02efc71fb8c788c1222c36256e15f89354d", 0xa}, 0x60, &(0x7f0000000a40)=[{&(0x7f0000001380)="78856384f5356e1784cf42231e744adcbea977675c1975859355c382be4411ebed4c58d3ea1f330aee7b8dfaac65b372000ab9ac66a5ed6d0cfda7d40200c11fc59721b0631dcc7164176e66c92ad04a5d9a3d868432b93817e50857405144a2971c10a152e6bb7253c2a1fde41e624bf44af0e8f4ae196fd91bd147aedb87f31b3879b8bd8350a3ad587e679ad2442074860c6f5729ef93967b11834262", 0x43}, {&(0x7f0000000a00)="b920c56c2e025eb05deb010a811c7e78e890aa4fbe4168089a5816c633636004fcc4", 0x22}], 0x2, &(0x7f0000000a80)={0xf8, 0x6, 0x2, "be4283da830001b4305047febe8020a56264a2917c01da31fd208a0f90f0c96986d4eb9edeede0c9824b73309241b6d53a595d50b679f062a531c178e1942213c887fb82e913074fdc5862356b9f934578c3b27f9c03d8c44cbb20ffbdb95bef1500ad445d9d628a313b21145ba3d864825c2e44142c51671632bab5d061571ee53600d49016b870c14873fc8baeda30eccf75f198318d179da7b6fd2174af7842023adc2510b1596d49cf2ed9ffb2428e7d61210abad4a704792afdf28dcd6612c221be1ea2baf04cb2f3c322a3513c62876932b35e922bfd4c42bd6a75d3ae602f485fcd5d0f2e"}, 0xf8, 0x1}, {&(0x7f0000000b80)={0x27, 0x1, 0x2, 0x7, 0x8001, 0x7f, "dfd6e4fea6e8c56e309494a5c3e7b808853bde4c451cf120a905dd689cc29817b91dc45030f7c94bf06113ac78d916df2f522a8c906489e91a53bcd67d4e30", 0x4}, 0x60, &(0x7f0000001040)=[{&(0x7f0000000c00), 0xffffffffffffff2e}, {&(0x7f0000000c40)="c64e59e9732d306c0937afdd9fef651c748b2a67345a7fe203f557f11e2f3758339332dd527221d987176a81b30d7dd0528a6d008d2556d26102016873648effc0dbdfb4b20384fd61d320476300890c0d90ac3abecdee5102a67987f4f4c502070636a8ebb34f455d5f1652e2ad208a3e629f3aadd041661c462e127df96f", 0x7f}, {&(0x7f0000000cc0)="36ac23749e96e2f15d90bb43cef9c8e3cf47cd2e0f802da205c3053e1a66691fc18e124370766891d576", 0x2a}, {&(0x7f0000000d00)="3848530af3c03dd3f6aceeb4e960ba9e5b49b890c9ecd48bd3dd56868df62bb5f7370972284ba70c4ea3cc4f0caa105f851b3b81a8636d839299ff64a407274710d9de12a4c4ddf3be1b2a5d1e60f40bbf3c91b3afafa5fc2782ae7eb5b880f0cce12bf0eb657507626a2ac1bf6e90b9cfa34977c846213b48644f6887835fe50d928df08393cb63837fb9d8e26248", 0x8f}, {&(0x7f0000000dc0)="da85efeaa12ca6afba6536d312f7d377848e5e51b5dc494a1df41f051d5b78210d3ef1985b2f79823ec78de397cc298563357bbc1705b65b901acc2244043e70756273cac488b12765ba2a9d2bd3a0a4cfa028445501b5348aa75bb22ff2473bcb1eab6cdde068ed7771349c04f15df4e781e399cc18177be1bcd268a733f64b0a74c81262f7c3425ee2780b040bdabdd121c27c4a67b6d0", 0x98}, {&(0x7f0000000e80)="f86bfe64586751d1f5a8b63b098a13e3aea91d65d124b970555817d055232c7edb6c857be7c2afd5e9c0dc7bbf918a0d030ed81e6197708a93ad4ce4ecf0de134a5d44d8", 0x44}, {&(0x7f0000000f00)="2bc9b1bb24538bd4c69dd72d7b68ba02948d96523312b03fc99b30d8bf2371bc42ad1f5bc70d68d42b9e39c57ec16e062bea5df28adc66b36507f992be21d16d018c8222e680f9fa940f6b39d0044b75724c173e336eda2fe6bc1af000bdb74187eedef18dcdc612cdd9a01457c8dd75f0992096eab329cd2d8e2b2a947b8384522bc952638854d20b5b3c3cffd7e805dc785b2ee20f66ff66286107f8632b906c97e812767792339e7f88327258ea44", 0xb0}, {&(0x7f0000001440)="c8140a71712ebb5487c686cc2954ae1e000528e3dd0f4d1822c910878593b3cbb4c6ce7f622a9946e56aa5cdcef1b66f13bcb6881f802a3b6d34195f38f6f7db90805dacf8307d0cb81a46f22a3ab5da97e55ff7488cec9c596aa55be5aa", 0x53}], 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x108, 0x400c008}], 0x4, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2400, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:19 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x86f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:20 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2500, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:20 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x113)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0x0, 0x8}, 0x10)
close(r2)

18:06:20 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x10200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x12000, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17fffff, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:20 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2600, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:20 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x870, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
getdents(r1, &(0x7f00000000c0)=""/240, 0xf0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
getsockname$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000040)}, 0x10)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x100, &(0x7f0000000200)=0x4)

18:06:20 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2700, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:20 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x871, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:20 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x7, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x6031, r4, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000400)=""/106, &(0x7f00000003c0)=0xffffffffffffffcd)
getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={<r5=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={r5, 0x6, 0xcc, "6ff6eeb6bb55e2611f92b5a3a7df50c5fb40818b39c079dd7a41ce8864bfb5ff60696c6dd7b38def9544c4d65d858cd12f0384fe199da5bf5f057da9781b4288ae8c371ceb3a11040b36b16b06f1c241bc8f79d622d1f67c86dee4bd4ed8ac294657f7008343d2d53e69ff55956ca7d469ce2a12a06633ce7bd02937233e96c7a41d90fcaeead3187df02c4c7a87d49e34947fc9174331fa3fb237295a2c6bb1d1d9aeb2164c2ac1412b7491479a738a23e8d80cc89005b75fc2bf239946386d83cae4db7e09534002976f6f"}, 0xd4)
close(r2)
r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5f2, 0x200000)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000002c0)={0x0, 0x3, 0x8})
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r9 = dup2(r7, r8)
fstat(r9, &(0x7f0000001340))
ioctl$VIDIOC_G_PRIORITY(r9, 0x80045643, 0x2)
ioctl$VIDIOC_S_EDID(r6, 0xc0285629, &(0x7f00000000c0)={0x0, 0x9, 0xf28, [], &(0x7f0000000040)=0x20})
dup(r2)

18:06:20 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@empty, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:20 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2800, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:20 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x872, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:20 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x10200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x12000, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17fffff, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:21 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2900, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:21 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x200100, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x2)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:21 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x873, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:21 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:21 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@empty, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r3, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:21 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x874, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:21 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4800, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:21 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000800000000000000500"/120], 0x78)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1303.404290][   T26] kauditd_printk_skb: 29 callbacks suppressed
[ 1303.404303][   T26] audit: type=1804 audit(1568484381.650:4035): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1139/file0" dev="sda1" ino=16657 res=1
18:06:21 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x875, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:21 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4900, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:21 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0)
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
getdents(r1, &(0x7f00000000c0)=""/240, 0xf0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
getsockname$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000040)}, 0x10)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x100, &(0x7f0000000200)=0x4)

18:06:22 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x876, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:22 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x5865, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:22 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x400200, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000380)="e64e4b9cc236251f8eb4ae39ac5196f3fca872b507a245a0e0495abcc1afdf6a7dd266086255a034bb3be34dc8bdae1b6382cbc194b692846744ef3622628731cc0e5654fd9d7810667f50d494d81a27249ed72943b3a449f4eaed264b36c8ebed233b427ff436b647c7d07183f6f1bfdaec69bbccd888cf02b966112e7827a711904d15aca8e1bae5d1f8e4375f323ef4abd7974937806f0c005cc8fb3cd25908c02b35d9a762b8386f6b5969bf7840a7037d1c1119d07705772c89c7fd9097447bd269af4267d86cbcb9944fc065c705b7acddf7cc5c1e00fa50863babd12b44a6e774072e83d4dd818dd984e1aecbb8c08a")
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000140)={0x97, &(0x7f00000001c0)="20087ef3b8a6e09104d66040ea774f9be180a5693ce6ad14dd3cdc59267b573fd5023d8828899dd7fa4c98bcf38e4bc57ac43c069ffa87afa1084f4b3bc5751b0b81e1e56a3688cf20f6434699c972428954f2d939166eacf34f773edf82af6915469c98b36e32f53590bcdcdb310fe21f9fe082eefa0d488e343b00465c5aeae733ce17eb773cdd4ae7ffbcedc582ef469fadee635c9a"})
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1303.954974][   T26] audit: type=1804 audit(1568484382.200:4036): pid=27064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1140/file0" dev="sda1" ino=16834 res=1
18:06:22 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffe)

18:06:22 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x877, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:22 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x6000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:22 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x2000000000)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:22 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffe)

18:06:22 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x6558, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:22 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fstat(r2, &(0x7f0000001340))
utimensat(r2, 0x0, 0x0, 0x0)

18:06:22 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x878, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1304.551684][   T26] audit: type=1804 audit(1568484382.800:4037): pid=27106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1141/file0" dev="sda1" ino=16851 res=1
[ 1304.653891][   T26] audit: type=1804 audit(1568484382.860:4038): pid=27106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1141/file0" dev="sda1" ino=16851 res=1
18:06:22 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffe)

18:06:23 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x8100, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:23 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x879, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:23 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffffffffffe)

18:06:23 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc00e, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:23 executing program 5:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r0)
ioctl(r0, 0x0, &(0x7f00000000c0)="15a56c91f46a666a134a7cefe8ee8faf1a5ae35b6779675cc3fd4bff6ff71437a387edf6ad")
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfff, 0x20080)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x81000)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:06:23 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x87a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:23 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffffffffffe)

[ 1305.060988][   T26] audit: type=1804 audit(1568484383.310:4039): pid=27129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1142/file0" dev="sda1" ino=16507 res=1
18:06:23 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0)
r1 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x8, 0x6, 0x8, 0xff, 'syz1\x00'}, 0x4, 0x400, 0x2, r1, 0x1, 0xfffffffffffff801, 'syz0\x00', &(0x7f0000000180)=['user-systemeth1posix_acl_access@selinux--cgroup\x00'], 0x30, [], [0x1, 0x4, 0x4, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x0, 0x2ee})

[ 1305.155391][   T26] audit: type=1804 audit(1568484383.350:4040): pid=27132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1142/file0" dev="sda1" ino=16507 res=1
18:06:23 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x87b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:23 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffffffffffe)

18:06:23 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xff00, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:23 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x87c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:23 executing program 5:
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00')
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{}, {r1, r2/1000+30000}})
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0)
r3 = msgget$private(0x0, 0x86)
msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000982e4f934b8b6b473b71141df729da239133fb5e992adcf6a7b350a155aabcdf4de91d4af22e485f8a36995952eec9b67867c4fc853de2aec9d11f26034c75cac879c11b59b42fc5127ed1d6bbf8d82b95b1b2c066718c9082fd5f92b2d0e9a8e3f7bc12d9a520a734e39a04500afde95e48e39993291acd44f91e23f48f77662df9d08e33e3e93a0dbbb0585fda86a702afcc"], 0x9b, 0x0)

18:06:23 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x14, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0xfb0d, 0x0, 0xa000}, 0x4)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000540)=r9, 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={<r10=>r9, 0xd03, 0x49e}, &(0x7f00000003c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000400)={r10, 0x9}, 0x8)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1305.501380][T27161] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
18:06:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:23 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x34000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:23 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x87d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

[ 1305.619325][T27161] device 0 entered promiscuous mode
[ 1305.632256][   T26] audit: type=1804 audit(1568484383.880:4041): pid=27155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1413/file0" dev="sda1" ino=16562 res=1
[ 1305.709000][T27161] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 1305.737615][   T26] audit: type=1804 audit(1568484383.970:4042): pid=27173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1413/file0" dev="sda1" ino=16562 res=1
18:06:24 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x87e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1305.787404][T27161] device 1 entered promiscuous mode
18:06:24 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x400300, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:24 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffc, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x3ff, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000090040000700200007002200e1d8ac360c6ca00007002000080000000c0030000c0030000c0030000c003000004000000c197", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16=r0], @ANYBLOB="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"], 0x3)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0xfffffffffffffffe)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:24 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffffffffffe)

18:06:24 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000040)={0xb})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0xffffffffffffffff}, 0x28, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000540)=r3, 0x4)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={<r4=>r3, 0x0, 0x4, [0x1000, 0x6, 0x6, 0xbe67]}, &(0x7f0000000080)=0xfffffffffffffeb1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x1, @loopback, 0xa6}}, 0x7e3f, 0x9, 0x7, 0x7b000, 0x80}, &(0x7f00000001c0)=0x98)

18:06:24 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf0ffff, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:24 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x87f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1306.032410][T27193] kcapi: driver "" not loaded.
18:06:24 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffffffffffe)

[ 1306.111653][T27193] kcapi: driver "trusted.overlay.nlink" not loaded.
18:06:24 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xb579b74894736c6e, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x100000000000008e)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f455c41060001000501"], 0xa)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xc00, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x3, 0x5, [], &(0x7f0000000140)})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

18:06:24 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x880, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:24 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
r4 = accept$inet6(r3, &(0x7f0000002400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002440)=0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000002480)={@rand_addr="5cb95146be81949d7027eea31cad0865", 0x0, 0x2, 0x7f, 0x5, 0x3, 0xe95f}, 0x20)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0)
fdatasync(r5)
r6 = socket$inet6(0xa, 0x80001, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r6, r7)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:24 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r7, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f00000003c0))
r8 = getpid()
fcntl$lock(r6, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r8})
ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000380)={@remote, <r9=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r7, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r9, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r11, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f00000003c0))
r12 = getpid()
fcntl$lock(r10, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r12})
ioctl$RTC_SET_TIME(r11, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000380)={@remote, <r13=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r11, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r13, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r14 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r15 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r16 = dup2(r14, r15)
fstat(r16, &(0x7f0000001340))
getsockopt$inet_mreqn(r16, 0x0, 0x20, &(0x7f0000000300)={@broadcast, @broadcast, <r17=>0x0}, &(0x7f0000000340)=0xc)
r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r19 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r19, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r18, 0x8907, &(0x7f00000003c0))
r20 = getpid()
fcntl$lock(r18, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r20})
ioctl$RTC_SET_TIME(r19, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r18, 0x29, 0x14, &(0x7f0000000380)={@remote, <r21=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r19, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r21, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r22 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r22, 0x0)
getpeername$packet(r22, &(0x7f0000000380)={0x11, 0x0, <r23=>0x0}, &(0x7f00000003c0)=0x14)
r24 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r25 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r24, r25)
ioctl$UI_ABS_SETUP(r24, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getpeername$packet(r24, &(0x7f00000004c0)={0x11, 0x0, <r26=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
r27 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r28 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r28, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r27, 0x8907, &(0x7f00000003c0))
r29 = getpid()
fcntl$lock(r27, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r29})
ioctl$RTC_SET_TIME(r28, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r27, 0x29, 0x14, &(0x7f0000000380)={@remote, <r30=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r28, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r30, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r31 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r32 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r32, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r31, 0x8907, &(0x7f00000003c0))
r33 = getpid()
fcntl$lock(r31, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r33})
ioctl$RTC_SET_TIME(r32, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r31, 0x29, 0x14, &(0x7f0000000380)={@remote, <r34=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r32, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r34, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000dc0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r35=>0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000ec0)=0xe8)
r36 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r37 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r37, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r36, 0x8907, &(0x7f00000003c0))
r38 = getpid()
fcntl$lock(r36, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r38})
ioctl$RTC_SET_TIME(r37, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r36, 0x29, 0x14, &(0x7f0000000380)={@remote, <r39=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r37, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r39, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r40 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r40, 0x0)
r41 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r42 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r42, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r41, 0x8907, &(0x7f00000003c0))
r43 = getpid()
fcntl$lock(r41, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r43})
ioctl$RTC_SET_TIME(r42, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r41, 0x29, 0x14, &(0x7f0000000380)={@remote, <r44=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r42, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r44, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r40, 0x8933, &(0x7f0000000f00)={'team0\x00', <r45=>r44})
r46 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r47 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r47, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r46, 0x8907, &(0x7f00000003c0))
r48 = getpid()
fcntl$lock(r46, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r48})
ioctl$RTC_SET_TIME(r47, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r46, 0x29, 0x14, &(0x7f0000000380)={@remote, <r49=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r47, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r49, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, <r50=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000011c0)=0x14, 0x40000)
r51 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r52 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r52, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r51, 0x8907, &(0x7f00000003c0))
r53 = getpid()
fcntl$lock(r51, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r53})
ioctl$RTC_SET_TIME(r52, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r51, 0x29, 0x14, &(0x7f0000000380)={@remote, <r54=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r52, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r54, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r55 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r56 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r56, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r55, 0x8907, &(0x7f00000003c0))
r57 = getpid()
fcntl$lock(r55, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r57})
ioctl$RTC_SET_TIME(r56, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r55, 0x29, 0x14, &(0x7f0000000380)={@remote, <r58=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r56, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r58, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r59 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r60 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r60, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r59, 0x8907, &(0x7f00000003c0))
r61 = getpid()
fcntl$lock(r59, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r61})
ioctl$RTC_SET_TIME(r60, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r59, 0x29, 0x14, &(0x7f0000000380)={@remote, <r62=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r60, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r62, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r63 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r64 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r63, r64)
ioctl$UI_ABS_SETUP(r63, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(r63, 0x8933, &(0x7f0000001200)={'team0\x00', <r65=>0x0})
accept$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, <r66=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001280)=0x14)
r67 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r68 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r68, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r67, 0x8907, &(0x7f00000003c0))
r69 = getpid()
fcntl$lock(r67, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r69})
ioctl$RTC_SET_TIME(r68, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r67, 0x29, 0x14, &(0x7f0000000380)={@remote, <r70=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r68, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r70, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r71 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r72 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r72, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r71, 0x8907, &(0x7f00000003c0))
r73 = getpid()
fcntl$lock(r71, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r73})
ioctl$RTC_SET_TIME(r72, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r71, 0x29, 0x14, &(0x7f0000000380)={@remote, <r74=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r72, &(0x7f0000000500)="4b085b2933a302781fbfc2b643da1df7eccc81350d5a7c588872130fce9650507f617d690da63ba4721826266a976f1556d4bdef04229705160946dc8f40e247a396e619168f625d90b74598218ab57e9e3160879a87fcdd39d0c80f2b922d356c7f3491d4e6c3913a114a5e08818a67f5a80f97a0cf82eab7304d4789f8e45adea072f3d05d1af3d50e7c7ee79d690a80ed42a6d56ad0622056c204ba892b73ce6b4dce6c049c622d63b31bb61b97bf648d718683049863dcc78e96bb1a3ae681e1aa8d2a1c6d3a7e01af7aae009c8be1237bb96090e5ff25523d85eff6fad3cd4d4cff864eb7d32960dd76f301076851a3e7a6752f48e2d4706dd3807674", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r74, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r75 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r76 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r76, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r75, 0x8907, &(0x7f00000003c0))
r77 = getpid()
fcntl$lock(r75, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r77})
ioctl$RTC_SET_TIME(r76, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r75, 0x29, 0x14, &(0x7f0000000380)={@remote, <r78=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r76, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r78, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'bond0\x00', <r79=>r78})
r80 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r81 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r82 = dup2(r80, r81)
fstat(r82, &(0x7f0000001340))
getsockopt$inet_mreqn(r82, 0x0, 0x20, &(0x7f0000001300)={@rand_addr, @initdev, <r83=>0x0}, &(0x7f0000001340)=0xc)
r84 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r85 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r85, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r84, 0x8907, &(0x7f00000003c0))
r86 = getpid()
fcntl$lock(r84, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r86})
ioctl$RTC_SET_TIME(r85, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r84, 0x29, 0x14, &(0x7f0000000380)={@remote, <r87=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r85, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r87, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r88 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r89 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r89, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r88, 0x8907, &(0x7f00000003c0))
r90 = getpid()
fcntl$lock(r88, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r90})
ioctl$RTC_SET_TIME(r89, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r88, 0x29, 0x14, &(0x7f0000000380)={@remote, <r91=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r89, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r91, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r92 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r93 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r93, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r92, 0x8907, &(0x7f00000003c0))
r94 = getpid()
fcntl$lock(r92, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r94})
ioctl$RTC_SET_TIME(r93, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r92, 0x29, 0x14, &(0x7f0000000380)={@remote, <r95=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r93, &(0x7f0000000500)="4b085b2933a302781fbfc2b643da1df7eccc81350d5a7c588872130fce9650507f617d690da63ba4721826266a976f1556d4bdef04229705160946dc8f40e247a396e619168f625d90b74598218ab57e9e3160879a87fcdd39d0c80f2b922d356c7f3491d4e6c3913a114a5e08818a67f5a80f97a0cf82eab7304d4789f8e45adea072f3d05d1af3d50e7c7ee79d690a80ed42a6d56ad0622056c204ba892b73ce6b4dce6c049c622d63b31bb61b97bf648d718683049863dcc78e96bb1a3ae681e1aa8d2a1c6d3a7e01af7aae009c8be1237bb96090e5ff25523d85eff6fad3cd4d4cff864eb7d32960dd76f301076851a3e7a6752f48e2d4706dd3807674", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r95, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000001380)={&(0x7f0000002800)=ANY=[@ANYBLOB='(\a\x00\x00', @ANYRES16=r5, @ANYBLOB="10002abd7000ffdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="8400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001010000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8c01020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004007f0000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r21, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400cf00010004000000ff7f017f08000000030000e3ffff0000040003fb030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r30, @ANYBLOB="9401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040029714f6808000600", @ANYRES32=r34, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400060003000300000007000401e32cffff050009070200000001004c00b173b036fdff0487a50a00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r35, @ANYBLOB="3c00010034000100ff0f61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r39, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r45, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r49, @ANYBLOB="080007000000000008000100", @ANYRES32=r50, @ANYBLOB="70010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r54, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r58, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r62, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r65, @ANYBLOB="080007000400000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004004d03000008000100", @ANYRES32=r66, @ANYBLOB="8c0002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r70, @ANYBLOB="00010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000080000008000600", @ANYRES32=r74, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r79, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r83, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r87, @ANYBLOB="08000100", @ANYRES32=r91, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r95], 0x728}, 0x1, 0x0, 0x0, 0x20008081}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r96=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r96)

18:06:24 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1})
ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffffffffffe)

18:06:24 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:24 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x881, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1306.367572][   T26] audit: type=1804 audit(1568484384.610:4043): pid=27225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/1999/file0" dev="sda1" ino=16693 res=1
[ 1306.496093][   T26] audit: type=1804 audit(1568484384.690:4044): pid=27225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/1999/file0" dev="sda1" ino=16693 res=1
18:06:24 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xc8a}, 0x32c)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200001040000010a0000000200000000000000000c00000000000000000080003b4b9d2692df950140e1ab8b50d7db7a217cc64317eb67475d4bf30963fec2bff2169551ccf2a7ea78aa219aa71f045a1dced20f1de0b95881a0a770ae9815a12ae9d6f4284cc643e22dde2ff62c2768595b66e2"], 0x20}}, 0x0)

18:06:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:24 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x882, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:24 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x60d021, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r7}}, {@measure='measure'}, {@euid_lt={'euid<', r8}}]}})
r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r10 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r11 = dup2(r9, r10)
fstat(r11, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r12}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r13}}, {@measure='measure'}, {@euid_lt={'euid<', r14}}]}})
r15 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r16 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r17 = dup2(r15, r16)
fstat(r17, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r19=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r20=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r18}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r19}}, {@measure='measure'}, {@euid_lt={'euid<', r20}}]}})
syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000001c0)='\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000380)="383ac2c56e884de2036ba8e242f51ed49a724ca8e9f109b62ee94de08da1f91051dc8645acf1146a67e93998f4bd47d5e4b4f25f30ddde56f785bdd9a79788dc8fc0f0234c621a75b1fa0f111801a8df884d6a4718e34e17f82cb23412e285bed039277921c284f9d20bfb0f7c1ee195c2a0d06c43a349ec3d20d9711db5d853fd0ddcf6150aab0ef6c2034321a5796ef6cb531eb9ebaa063752a516300718108cb3be", 0xa3, 0x80000001}], 0x1000, &(0x7f0000000540)={[{@dots='dots'}, {@fat=@sys_immutable='sys_immutable'}, {@dots='dots'}, {@dots='dots'}], [{@measure='measure'}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r7}}, {@dont_measure='dont_measure'}, {@fowner_eq={'fowner', 0x3d, r13}}, {@uid_eq={'uid', 0x3d, r19}}]})

18:06:24 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x3000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:25 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x883, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:25 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0})
r1 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x101000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x6, 0xdd}, &(0x7f0000000340)=0xc)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001180)={0x2, 0x0, [{0x0, 0x16, &(0x7f0000000180)=""/22}, {0x0, 0xfffffffffffffe60, &(0x7f0000000080)=""/170}]})
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000280))

18:06:25 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:25 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1)
close(r1)
close(r2)

18:06:25 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x5000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:25 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x884, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:25 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:25 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080))
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x200000, 0x0, 0x12, r0, 0xc000000000)

18:06:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:25 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x885, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1307.490902][T27307] x86/PAT: syz-executor.5:27307 freeing invalid memtype [mem 0xc000001000-0xc000004fff]
18:06:25 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x6000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1307.574941][T27319] x86/PAT: syz-executor.5:27319 freeing invalid memtype [mem 0xc000000000-0xc000000fff]
18:06:25 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = creat(0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
accept4$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x80000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:25 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
fchdir(r1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x1)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x8, 0x2, 0x0, 0x2, 0x60a66d6a, 0x8}})
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000000), 0x2)
getdents64(r1, 0x0, 0x328)

18:06:25 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x886, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:26 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
fstat(r3, &(0x7f0000001340))
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000001c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r4 = socket$kcm(0xa, 0x6, 0x0)
close(r4)
r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00')
r6 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="4afdd3692372e7025471b3296edba2976b3257d103bcec3f0aefcfda27ff6eb5d8da41192db055e0dad468047fa2187d88acd90807c29789db7e07b32e69729e6d470d18fa0a2fb72d3fb0d03c6dc00e94f72331ade58bae212138872c26059490accc49652c0ef252d87b55293bf2d827f8d2673a685b77575788df8e9b867e888a5be12591d36c34eded55b8101610e035035cd20d7ac7d01f78ba272712be98b067e3dbe54e8156f45f240cd29c6ee577fa973ff203d63547ce3e3174ad48aadde1a769da388ef47c066b6a8be5ac3ebfab632c08cd24a0e9ec06d88037d03fa23f387d01ce10680b7cf9e12638", 0xef, r5)
keyctl$assume_authority(0x10, r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r4, &(0x7f0000000080), 0x12)
close(r4)
close(r7)

18:06:26 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x7000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:26 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x887, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x200001000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070")
r1 = getpgid(0xffffffffffffffff)
get_robust_list(r1, &(0x7f0000000400)=0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
timer_create(0x3, &(0x7f0000000000)={0x0, 0x80000035, 0x0, @thr={&(0x7f0000000300)="aaef6fab691a64b6cafe2a16283aabd559a04f84c990fffd3a5144a5223cffbc6b4caae5158a3330071ff6039668b6f5ae23b8034cde405835ed4097964ae15c6996165263ee0f3edd0c9075c3f3745d7bef55a035b47f42737bf3723a22f425e783d1998046f4460f69a2c2a2b9594b956a097aadf8c757a24de7f35d7fe42ef388fce4f387c47aeb17611d97ddc01e35077aecb0802dad72cb8eded6aefc1731222de4573466fe47729d6af5e62bfbc526a993efcf8aa9e044bc4e7f78d70916d707", &(0x7f0000000400)="40794a8dc5db2995b748"}}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0))

18:06:26 executing program 4:
socket$kcm(0x2b, 0x1, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r0, r1)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$kcm(0xa, 0x6, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r5, &(0x7f0000000080), 0x12)
close(r5)
close(r6)

18:06:26 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x8000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:26 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000000)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400090500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="080008000801000014000200fe8000000000000000000000000000aaaceaf5833dc241b0e632c1cddc0b55f998c361ec29e3d04c8d13626bb6206506aa6dd06344293ced6ddae7ed3778768b2a0d95224ed8e6ab83d82a9d003031445c74ac45411f1ce65b93ef38d21562b49376b770ebd04e51f58fe7c51aac346d196ebceac1ebdd74da628cac7305c08dbf80c584525faad221f0ee96"], 0x34}}, 0x0)

18:06:26 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x9000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:26 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x888, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:26 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f00000000c0))
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000000))
close(r1)
close(r3)

18:06:26 executing program 5:
open_tree(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000001900))
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="1cfdffffff8a0ab7960f0100010000000000fdff993802aa0063b8f24252b1d85cbf008070d6ae95539aac7266824abb8200faffff37f70f653f0ffb09f0d5362b74797f0acad550fe203534da91b5b9fb501e1ac4bfa3841f9d63e232b9b2500fa3d96033ccfdff0641d2eb4cb7860c19cadf38c7f1c7f8e6264e690f8fbcd5704b990c040588ae2a2ebc0bba59294ff48ed9e76dd8d814967b4f34ff0f000000000000004f54d804ff26d22d6ad86953609f5f15e8f9a26bc46c8c4c7cd428157d"], 0xc2)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff5bfe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4)
iopl(0x3ffffffffffe)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
socket$isdn_base(0x22, 0x3, 0x0)

18:06:26 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xa000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:26 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x889, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:26 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
socket$caif_seqpacket(0x25, 0x5, 0x2)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1308.747229][   T26] kauditd_printk_skb: 31 callbacks suppressed
[ 1308.747243][   T26] audit: type=1804 audit(1568484386.990:4076): pid=27398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2003/file0" dev="sda1" ino=16994 res=1
18:06:27 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xb000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:27 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x88a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:27 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xae, 0x4, 0x2, 0x4, 0xb, 0x7, 0x10001, 0x1, 0x1, 0xafdc, 0x80000000, 0x6})
close(r2)

[ 1308.959674][   T26] audit: type=1804 audit(1568484387.090:4077): pid=27395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2003/file0" dev="sda1" ino=16994 res=1
18:06:27 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
readlinkat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=""/4096, 0x1000)

18:06:27 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:27 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x88b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:27 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, 0x62}, 0x2000)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x7, {0x7a13}}, 0x18)
close(r2)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r7 = dup2(r5, r6)
fstat(r7, &(0x7f0000001340))
bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000000))

18:06:27 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x7)
r1 = socket$pppoe(0x18, 0x1, 0x0)
pipe2(0x0, 0x0)
r2 = syz_open_dev$media(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4)
ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x18}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in=@empty}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0))
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200))
sendmmsg(r1, &(0x7f0000005b40), 0x4000000000001b2, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000001c0)=0x2, 0xffffffffffffff7b)
keyctl$get_keyring_id(0x0, 0x0, 0x2)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r5, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000003c0))
r6 = getpid()
fcntl$lock(r4, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r6})
ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000380)={@remote, <r7=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r5, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r7, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r8)
getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000500)={@rand_addr, <r9=>0x0}, &(0x7f0000000540)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@local, 0x2c, r9})
r10 = shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x4000)=nil, 0x4000)
shmdt(r10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000340))
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)
ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}})

18:06:27 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xd000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:27 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x88c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1309.503494][   T26] audit: type=1804 audit(1568484387.750:4078): pid=27463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2005/file0" dev="sda1" ino=16519 res=1
18:06:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

[ 1309.646230][   T26] audit: type=1804 audit(1568484387.780:4079): pid=27458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2005/file0" dev="sda1" ino=16519 res=1
18:06:28 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:28 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x80)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000540)=r6, 0x4)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={<r7=>r6, 0x1f}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r7, 0x9, 0xfffffffffffeffff, 0x1, 0x6, 0x7}, 0x14)
close(r2)

18:06:28 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xe000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1309.768467][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1309.768562][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1309.774266][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1309.780272][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:06:28 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x88d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

[ 1309.858448][   T26] audit: type=1804 audit(1568484387.810:4080): pid=27458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2005/file0" dev="sda1" ino=16519 res=1
[ 1310.057953][   T26] audit: type=1804 audit(1568484387.840:4081): pid=27463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2005/file0" dev="sda1" ino=16519 res=1
18:06:28 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:28 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x88e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:28 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x77, 0x40000)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f0000000240))
r9 = dup2(r5, r6)
fstat(r9, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r10}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r11}}, {@measure='measure'}, {@euid_lt={'euid<', r12}}]}})
r13 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r14 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r15 = dup2(r13, r14)
fstat(r15, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r17=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,dfltgid=', @ANYRESHEX=r16, @ANYBLOB=',cache=fscache,cachetag=/dev/dmmidi#\x00,access=user,cache=loose,loose,version=9p2000,access=user,access=any,fowner<', @ANYRESDEC=r17, @ANYBLOB=',measure,euid<', @ANYRESDEC=r18, @ANYBLOB="680ef505e735d0cd"])
getgroups(0x6, &(0x7f0000000280)=[r10, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, <r19=>0xee00])
fsetxattr$system_posix_acl(r3, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0xc853ba3b4cba5061, r4}], {0x4, 0x1}, [{0x8, 0x1, r19}], {0x10, 0x1}, {0x20, 0x3}}, 0x34, 0x1)
r20 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400040, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r20, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x1, @loopback, 0x8}, {0xa, 0x4e20, 0x141, @dev={0xfe, 0x80, [], 0x17}, 0x8}, 0x8, [0x7fff, 0x2, 0x4, 0x1000, 0x1000, 0x2, 0x0, 0x20]}, 0x5c)
close(r2)

[ 1310.192517][   T26] audit: type=1804 audit(1568484387.840:4082): pid=27463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2005/file0" dev="sda1" ino=16519 res=1
[ 1310.488401][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1310.494239][    C1] protocol 88fb is buggy, dev hsr_slave_1
18:06:28 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0/../file0\x00', &(0x7f0000000500)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\x99<zMw\a\x02:\x8d\x03\x15S\xf8\xdd\xa1\xa5\x02\xb2DTBG0mk\xe5gE\x9bIL\xdc}\x13\xf8\x8f\x15\xda\\J\xf2\xc1-\xe9\x92\x12\xa8\x81\x06\xa9\x9b2-\xc5)\xe9v\x92\xd54\x9fg\xff\xc2\xb5VL\x85\xd5j\xaf^)]\xe0m\x95\xf8\xea\x9a:\xaf\xae\x0f\x84Zo\xc0\x11!\x9f\xe0[\x8d\xb9\x1f\x95t\xe9F>:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf\b!WtS6\x02\x05&]\f\x02\xb9\xe3z\xa6\x95\xa4t2zZ\xd2\x84i\x10\x98\xec\\!\x8eh\x00\x00\x00\x00\x00', 0x100000, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000040)='../file0\x00', 0x2)
link(&(0x7f00000002c0)='./file0/file0/../file0\x00', &(0x7f0000000340)='./file1\x00')

18:06:28 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
uselib(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:28 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x10000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:28 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x88f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:28 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={<r6=>0x0, 0x5, 0x10}, &(0x7f0000000040)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r6, 0x7}, 0x8)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:29 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x890, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1310.746739][   T26] audit: type=1804 audit(1568484388.990:4083): pid=27529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2008/file0" dev="sda1" ino=16739 res=1
18:06:29 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x11000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1310.899637][   T26] audit: type=1804 audit(1568484389.070:4084): pid=27529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2008/file0" dev="sda1" ino=16739 res=1
18:06:29 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
uselib(&(0x7f0000000100)='./bus\x00')
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2)
r6 = accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0xc0000)
accept(r6, &(0x7f0000000280)=@rc, &(0x7f0000000200)=0x80)
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000000c0)={r5, 0x2})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:29 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x8004510a, &(0x7f0000000140))
ioctl$TIOCCBRK(r0, 0x5428)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0)

18:06:29 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x891, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:29 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x56ba, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x166}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x401, @mcast1, 0x401}, @in6={0xa, 0x4e22, 0xff, @empty, 0x9}, @in6={0xa, 0x4e20, 0x0, @empty, 0x1000}], 0x84)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:29 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x12000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:29 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file1/file0\x00')
r3 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r3, &(0x7f0000000380)='./file1/file0\x00', 0x0)
socket$inet_sctp(0x2, 0x3, 0x84)
renameat2(r3, &(0x7f0000000000)='./file1/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2)
close(r2)

18:06:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:29 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
prctl$PR_GET_SECUREBITS(0x1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000015181000006927b9b151cf39430a717b7173ec797a6966d6d50c7af6cf343d0618001e1b928c3efead69fa939a96374ac632b2da4a84cffff0694e9c3d7646435d3bc693bfe16ae25034bca111b7329d6a9184773c2fa12934cba85d07183df6e3ff00455838319d255f00d6b5021724b24736b85ba5f490b2e8301487f44c5c9e8f15b6055b651d030db2574f733b49cf1653a57a161061478ca54c335877fa2090ceae011d71aadd9c05d802acd4a2dae36839f7c6e12b51bf7001a35f18a999a0ef25a85f03e6ac83a7fe17e8a97798f78d3305a7", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x2, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:06:29 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x892, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:29 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x13000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:29 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
r4 = dup2(r2, r3)
prctl$PR_CAPBSET_READ(0x17, 0xf)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
fanotify_mark(r4, 0x2, 0x824, r5, &(0x7f00000001c0)='./file0\x00')
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:29 executing program 5:
r0 = socket$inet6(0xa, 0x80000000000002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000008880)=""/179, 0xb3}, {&(0x7f0000008940)=""/113, 0x71}, {&(0x7f0000008a40)=""/237, 0xed}], 0x3}}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1f, 0x4)
sendto$inet6(r0, &(0x7f0000000300), 0xfe02, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
sendto$inet6(r1, &(0x7f0000000200)="fb656024266ed3aef87b7a2e0d24dc830098b7cb002503bf0727a0b712481c6388f98dbd5d31516ea7f60223c888f564b74119442831d035df703d4e7791c2c112e4c725c795a4f43abec138820e4a17efdf6a0f19d4502399e2a03d8e1be9", 0x5f, 0x40, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @rand_addr="a1bc868cd656bcb1d489fdc80a3a9553", 0x2}, 0x1c)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f00000001c0)={r5, 0xa, &(0x7f0000000080)=[0x920, 0x4, 0xcb, 0x6, 0x7fffffff, 0xffffffff80000001, 0x100000000, 0xff, 0x8ea2, 0x9], &(0x7f0000000100), 0x31, 0x2, 0xff, &(0x7f0000000140)=[0x1000002, 0x5], &(0x7f0000000180)})

18:06:30 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r4)

18:06:30 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x893, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1311.807605][   T26] audit: type=1804 audit(1568484390.050:4085): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1158/file0" dev="sda1" ino=16770 res=1
18:06:30 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x14000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:30 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0xfffffffffffffffa, <r4=>0x0, 0x10001, 0x9c})
ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f00000001c0)={0x80, r4})
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:30 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0xd102})
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x200011b9}], 0x1, 0x0)
dup2(r1, r2)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x1ff, 0x98, 0x3ff, 0xfffffffffffffff8}})
r4 = gettid()
tkill(r4, 0x1000000000013)

18:06:30 executing program 4:
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x12)
close(r0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4800, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x7, 0x12)
close(r1)

18:06:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:30 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x894, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:30 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x15000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:30 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$TIOCEXCL(r3, 0x540c)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x18085)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f40000002b000000170800000000000002000000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2)

18:06:30 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000040)=<r3=>0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r3)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r4 = socket$kcm(0xa, 0x6, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fchdir(r5)
recvmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r4, &(0x7f0000000080), 0x12)
close(r4)
close(r5)

18:06:30 executing program 5:
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf)
getitimer(0x0, &(0x7f00000001c0))
ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000140)={0xffffffffffffffff, "5a06a7bb9333fd0c3d356681035a5aa10000c1ffff000023d000", 0x3, 0x1})
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3)
setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x4)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000200)=""/77)
r2 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x9, 0x1e7203)
ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000280))
syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000580)=""/251, &(0x7f0000000680)=0xfb)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)=""/134, 0x86, <r5=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r2, 0x10, &(0x7f0000000500)={&(0x7f0000000380)=""/107, 0x6b, r5}}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)

18:06:30 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x15110000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:30 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x895, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:31 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x10)
write$cgroup_int(r6, &(0x7f0000000100)=0x40, 0x12)
close(r2)
close(r3)

18:06:31 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x16000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:31 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x896, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1312.954365][T27660] IPVS: ftp: loaded support on port[0] = 21
18:06:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:31 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x3, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x99bd223fe63666a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x600000, 0x40)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x20, 0x6, 0x208, 0xc28, 0x6, 0x6, 0x6, 0x0, r8}, &(0x7f0000000200)=0x20)
r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000fc316aab7c6208f8b1dfdad28f7a1df252299930b8eac8eff113830575b03880d8a1f72df76747229645ed753d7478b84241cc3048719beade819f39c840055a88908137bc2925c43e2fb6ce313439a51fbd", @ANYRES32=<r12=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000540)=r12, 0x4)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000240)={r12, 0x9}, 0x8)

18:06:31 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x17000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:31 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x897, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:31 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x434402)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x400, 0x9, 0xfffffffffffffe00}, {0x3, 0xfffffffffffffff9, 0x3ff, 0x1000}, {0x7, 0x1, 0x0, 0x8}, {0x6, 0x2, 0xffff, 0x80}, {0x3, 0x3f, 0x8001, 0x7}, {0x0, 0x6, 0x81, 0x6aae}, {0x6c14, 0x3, 0x3, 0x5}, {0x101, 0x0, 0x9, 0x6}]})
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x6}, 0xffffff08)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r6)
r7 = accept4$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x800)
close(r7)
close(r3)

18:06:31 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x898, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1313.646974][T27706] IPVS: ftp: loaded support on port[0] = 21
18:06:34 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x7fe, 0x4)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
recvmmsg(r1, &(0x7f0000004580)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f00000024c0), 0x0, 0x0, 0x382}, 0xfffffffffffffc00}, {{&(0x7f0000002580)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000002600)=""/241, 0xf1}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=""/212, 0xd4}, 0x8}, {{&(0x7f0000003840)=@l2, 0x80, &(0x7f0000003c40)=[{&(0x7f00000038c0)=""/73, 0x49}, {&(0x7f0000003940)=""/199, 0xc7}, {&(0x7f0000003a40)=""/72, 0x48}, {&(0x7f0000003ac0)=""/5, 0x5}, {&(0x7f0000003b00)=""/91, 0x8d}, {&(0x7f0000003b80)=""/147, 0x93}], 0x6, &(0x7f0000003cc0)=""/122, 0x7a}, 0x7}, {{&(0x7f0000003d40)=@l2, 0x80, &(0x7f0000003f00), 0x2, &(0x7f0000003f40)=""/223, 0xdf}, 0x10000}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004040)=""/191, 0xbf}, {&(0x7f0000004100)=""/195, 0xc3}, {&(0x7f0000004200)=""/155, 0x9b}, {&(0x7f00000042c0)=""/105, 0x69}, {&(0x7f0000004340)=""/8, 0x8}, {&(0x7f0000004380)=""/104, 0x68}], 0x6, &(0x7f0000004480)=""/205, 0xcd}, 0x486}], 0x5, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10)

18:06:34 executing program 4:
r0 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r0, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x2, 0x9e2f, 0x6, 0x2}, 0x10)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x6, 0x0)
accept(r0, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000280)={0xf5, 0x1000, 0x1, 0x0, 0x0, [{r5, 0x0, 0x5}]})
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r8)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r10 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r9, r10)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x1, 0x0)
r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x400, 0x0)
dup2(r11, r7)
close(r4)

18:06:34 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x18000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:34 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x899, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:34 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0xa0080, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000001c0)=0x7)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:34 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x89a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:34 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1b000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1316.249863][   T26] kauditd_printk_skb: 11 callbacks suppressed
[ 1316.249877][   T26] audit: type=1804 audit(1568484394.500:4097): pid=27734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:34 executing program 5:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x84}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

18:06:34 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x200000000, 0x0, 0xe25, 0x40000, 0x101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000140)='\x00', &(0x7f00000001c0)='./file0\x00', r1)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x10001, {{0xa, 0x2, 0x0, @ipv4={[], [], @remote}}}}, 0x2bb)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1316.412483][   T26] audit: type=1804 audit(1568484394.540:4098): pid=27734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:34 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x89b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:34 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1c000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1316.556406][   T26] audit: type=1804 audit(1568484394.610:4099): pid=27734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:34 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x38, 0xe771b3efee9b4fc3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r3)

[ 1316.661221][   T26] audit: type=1804 audit(1568484394.620:4100): pid=27734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:35 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x89c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:35 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0xa0080, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000001c0)=0x7)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1316.807524][   T26] audit: type=1804 audit(1568484394.690:4101): pid=27734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:35 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1d000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:35 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000100)="76ee6aeb2870d61979c968fbf604b9a0d6d7ff10a3ad42bb4001")
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340))
fcntl$dupfd(r6, 0x406, r1)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000))
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)
close(r1)
close(r2)
modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0x20000000, 0x1000, 0x3ff, 0x401, 0x2, 0x5da, 0x2, 0x0, 0x3}, 0x10)

[ 1317.035769][   T26] audit: type=1804 audit(1568484394.710:4102): pid=27745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
[ 1317.123556][   T26] audit: type=1804 audit(1568484394.720:4103): pid=27747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:35 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0117947700", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={<r9=>r8, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000002c0)=0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={r9, 0x1, 0x30}, 0xc)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x80001, 0x0)
r11 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r10, r11)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:35 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x89d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:35 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1e000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1317.184085][   T26] audit: type=1804 audit(1568484394.720:4104): pid=27747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2016/file0" dev="sda1" ino=16882 res=1
18:06:35 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r3)

[ 1317.245439][   T26] audit: type=1804 audit(1568484394.900:4105): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1430/file0" dev="sda1" ino=16521 res=1
[ 1317.379744][   T26] audit: type=1804 audit(1568484395.000:4106): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1430/file0" dev="sda1" ino=16521 res=1
18:06:35 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x89e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:35 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1f000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:35 executing program 5:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1d000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:35 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:35 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x81)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:35 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x20000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:35 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0117947700", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={<r9=>r8, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000002c0)=0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={r9, 0x1, 0x30}, 0xc)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x80001, 0x0)
r11 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r10, r11)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:35 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x89f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffe)

18:06:36 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x21000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:36 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0x100000000)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:36 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:36 executing program 5:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0))
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fstat(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r10}}, {@measure='measure'}, {@euid_lt={'euid<', r11}}]}})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@version_L='version=9p2000.L'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@cache_none='cache=none'}], [{@fowner_lt={'fowner<', r4}}, {@measure='measure'}, {@euid_lt={'euid<', r5}}]}})
r12 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r13 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r14 = dup2(r12, r13)
fstat(r14, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r17=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r15}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r16}}, {@measure='measure'}, {@euid_lt={'euid<', r17}}]}})
r18 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r19 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r20 = dup2(r18, r19)
fstat(r20, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r22=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r23=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r21}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r22}}, {@measure='measure'}, {@euid_lt={'euid<', r23}}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r24=>0x0}, &(0x7f0000000080)=0xc)
r25 = getegid()
r26 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r27 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r28 = dup2(r26, r27)
fstat(r28, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r30=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r31=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r29}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r30}}, {@measure='measure'}, {@euid_lt={'euid<', r31}}]}})
getgroups(0x3, &(0x7f0000000100)=[0x0, r29, <r32=>0xffffffffffffffff])
r33 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r34 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r35 = dup2(r33, r34)
fstat(r35, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r36=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r37=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r38=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r36}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r37}}, {@measure='measure'}, {@euid_lt={'euid<', r38}}]}})
r39 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r40 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r41 = dup2(r39, r40)
fstat(r41, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r42=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r43=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r44=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,dfltgid=', @ANYRESHEX=r42, @ANYBLOB=',cache=fscache,cachetag=/dev/dmmidi#\x00,access=user,cache=loose,loose,version=9p2000,access=user,access=any,fowner<', @ANYRESDEC=r43, @ANYBLOB=',measure,euid<', @ANYRESDEC=r44, @ANYBLOB='F8'])
getgroups(0x9, &(0x7f0000000140)=[r3, r15, r21, 0xee00, r24, r25, r32, r36, r42])
getgroups(0x2, &(0x7f00000001c0)=[0xee00, <r45=>0xffffffffffffffff])
setresgid(r45, r45, r45)

18:06:36 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:36 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x22000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:36 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x0, 0x0, [0x9, 0xa2d]})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x7, 0x3, 0x200000000000000, 0x1000, 0x0, 0xcd, 0x0, 0x403, 0x10000, 0x0, 0x3], 0x10000})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:06:36 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:36 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x23000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:37 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x200000000, 0x0, 0xfffffffffffffffc, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
fallocate(r3, 0x4, 0x0, 0x4)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x4, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:37 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$tipc(0x1e, 0x782a26846be3f162, 0x0, &(0x7f0000000000))
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x0, 0x46ebd18ae0856aed)

18:06:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffe)

18:06:37 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:37 executing program 5:
io_setup(0x7ff, &(0x7f0000001440)=<r0=>0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x500)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000000c0))
io_getevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
io_submit(r0, 0x1, &(0x7f0000001600)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xeffdffff}])
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8002, 0x0)

18:06:37 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x24000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:37 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000300)=""/80)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r3)
fsopen(&(0x7f0000000140)='anon_inodefs\x00', 0x1)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x1, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
dup2(r6, r7)
r8 = syz_genetlink_get_family_id$net_dm(0x0)
sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x20, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)

18:06:37 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd9c, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x361c8d72d6acd546)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0)={0x6})
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000140), &(0x7f00000001c0)=0x10)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r6, r7)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
dup2(r3, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:37 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x25000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:37 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:37 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:37 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0xac, 0x7706, "fe128dde109c1662c3a0ceaf6110995100011d2745b0c7455087cef721f51b69fdd2f4321f93727783655f40f74909bf37a7ffb8365969051f3b7338b05d9e474cba8b49aa80b4202274f073d6c7324b843ba47f9ed850980893a418f9a04287a72787671991929dc080c9f40fce889138a8e59b9cd344d361c74cb9aa59ef84916eb9b001498d1ac7d71a231e29cf230e0749a3a314bb514c00ee444558630def9c4366"}, &(0x7f00000002c0), 0x200)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)=""/178)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x8, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:38 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x26000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:38 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
fstat(r4, &(0x7f0000001340))
write$P9_RXATTRWALK(r4, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x7f}, 0xf)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r6)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000540)=r9, 0x4)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000000)={r9, 0x9}, 0x8)
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r5)

18:06:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffffffffffe)

18:06:38 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
mount$9p_virtio(&(0x7f0000000000)='.em1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8408, &(0x7f0000000140)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x5}}, {@posixacl='posixacl'}, {@cachetag={'cachetag', 0x3d, '.\\'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '@\xda\xf3keyringcpuset'}}]}})
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={<r5=>r4, 0x3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r5, 0xffffffff, 0x1, 0x5, 0x8001, 0xdb3, 0xffffffffffffff01, 0x2, {r6, @in6={{0xa, 0x4e22, 0x8001, @local}}, 0x1, 0x368, 0x1, 0x100000000, 0x80000000}}, &(0x7f0000000380)=0xb0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8982, 0x0)

18:06:38 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x27000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:38 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x207f9e100671a766, 0x0)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic})
close(r1)
close(r2)

18:06:38 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/27, 0x1b)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000200))
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r4, r5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:38 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x28000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:38 executing program 5:
socket$inet(0x2, 0x1, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x82)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0xa}, 0x20)

18:06:38 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:38 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x40480)
dup2(0xffffffffffffffff, r2)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0xffffffffffffffff, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'osx.', '/dev/snd/pcmC#D#c\x00'}, &(0x7f0000000300)=""/174, 0xae)
r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000200)={r4})
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xd8, 0x4e2f99a1079ea10c)
r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x5c080, 0x0)
setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4)
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x100)
r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r8)
write$cgroup_int(r8, &(0x7f0000000080)=0x7ffdffff, 0x12)
close(r1)
close(r3)

18:06:38 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x29000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:38 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x266001, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0)

18:06:39 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:39 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80000)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
r2 = dup(r1)
r3 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x3, 0x2)
write$capi20(r3, &(0x7f0000000540)={0x10, 0x1000, 0x41, 0x6aa6aa2109c283d3, 0x1, 0x6}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x9)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x2, 0x4, 0x2, 0x3})
r5 = creat(&(0x7f00000004c0)='./bus/../file0\x00', 0x1)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r7 = dup2(r5, r6)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x26b8)
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r9 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r8, r9)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
fstat(r8, &(0x7f0000001340))
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14)
fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x2)
io_setup(0x7, &(0x7f0000000080))
io_setup(0x7, &(0x7f0000000100)=<r10=>0x0)
io_destroy(r10)
io_submit(r10, 0x1, &(0x7f0000000100)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, r4, 0x0, 0x0, 0x8}])

18:06:39 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0)
write$cgroup_int(r3, &(0x7f0000000000)=0x100000000, 0x128)
close(r1)
close(r2)

18:06:39 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x40000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:39 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
r0 = gettid()
sched_setparam(r0, &(0x7f00000001c0)=0xff)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x12000, 0x0)
r2 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r2, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:39 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8a9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:39 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x48000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:39 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12)
close(r1)
close(r2)

18:06:39 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x49000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:39 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={<r7=>0x0, @broadcast, @empty}, &(0x7f0000000200)=0xc)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@delqdisc={0x88, 0x25, 0x1000, 0x70bd2a, 0x25dfdbff, {0x0, r7, {0xffff, 0xc}, {0x2, 0x10}, {0x0, 0x8}}, [@TCA_RATE={0x8, 0x5, {0x4, 0xeb3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x6, 0x1, 0x1}}]}}, @TCA_RATE={0x8, 0x5, {0x0, 0x3}}, @qdisc_kind_options=@q_prio={{0xc, 0x1, 'prio\x00'}, {0x18, 0x2, {0x5, "62123970adbdefac35ba58b8991da09f"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x60000000)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:39 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x383}, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x2)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r3)
r4 = syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0xc5ce, 0x800)
ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})
r5 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x20800)
ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000140)={0x1})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fddbdf2501000000000000000b0000000014001462726f6164632173742d6c696e6b0000e36ff5adb4d0185423e17f1bd3ff87077fabaed2525d25cc74f532e38a7467b64f188f21bd8cba061f8d67a4b1e06c80fefec217d4fced47c4da7c55762dea84595645a6ffab559fc4e0620d2b1fed1375064c5b35a730d6e08e520e00d6cda9cd4424f928"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x4000, 0x0)
ioctl$RTC_WIE_OFF(r8, 0x7010)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', r7})

[ 1321.660092][   T26] kauditd_printk_skb: 26 callbacks suppressed
[ 1321.660104][   T26] audit: type=1804 audit(1568484399.900:4133): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1440/file0" dev="sda1" ino=16579 res=1
18:06:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0)

18:06:40 executing program 5:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x204000, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x6)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0)
r5 = dup2(r4, 0xffffffffffffffff)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@dev, <r6=>0x0}, &(0x7f0000000080)=0x14)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={r6, 0x213, 0x7, 0x3, 0x3, 0x6, 0x5})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000140)=0x8, 0x4)
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f00000001c0))
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r11, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000073], [0x11]})
ioctl$SIOCRSACCEPT(r5, 0x89e3)

18:06:40 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8aa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:40 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x60000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:40 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x1, 0xfffffffffffffe01, 0x1, r4}, &(0x7f0000000100)=0x10)
r5 = socket$kcm(0xa, 0x6, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r5, &(0x7f0000000080), 0x12)
close(r5)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
mkdirat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x1ff)
ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000000)={0x4, 0x2, 0x0, 0x1, 0x6})
close(r6)

18:06:40 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0))
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1321.803093][   T26] audit: type=1804 audit(1568484399.910:4134): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1440/file0" dev="sda1" ino=16579 res=1
[ 1321.896069][   T26] audit: type=1804 audit(1568484400.140:4135): pid=28096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1174/file0" dev="sda1" ino=16785 res=1
18:06:40 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ab, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:40 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x65580000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:40 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400080, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001940)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000001a40)=0xe8)
sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="c2024bf0883303fd91fe2fe26603ef170c0fb35c3b8f2360790f1b853cf540306f29d9fedeed85bfb726fd67e86ca2d310a1095c01a88824e2832b28ddfedb2c93afe966e517979d27437130d2533467263aa02c41e6bf2062206d2cc9e629cdaaf75bf5af35a0e1cc00854a96e0ffcf88f475364aba942ba991b6909c8e1faf923ec0e9c507594b2458afee9c867add380929366fcb47a86189c3e85140fd9443cef109562fea8ccfdb73534001f3dcc9f6e9bbd2f95fcec1251bb232666f6c02e2d5d42eaad290731ca4", 0xcb, 0x4, &(0x7f0000001a80)={0x11, 0x9, r3, 0x1, 0x8, 0x6, @dev={[], 0x1f}}, 0x14)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x10010, r0, 0x0)
write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xbb4f, 0x3, 0x100000000000000, 0x29c, 0xc8a, 0x0, 0x6, 0x12c78000, 0x32e, 0x40, 0xf5, 0x200, 0x9, 0x38, 0x2, 0x8, 0x8, 0x7}, [{0x6, 0x1, 0x80000001, 0x200, 0x100000000, 0x80, 0x7, 0x15}], "e608db2099e7514eb0d70ca6d8c23908ebdd8bbca947f69971bfc44db8d48b7515294ccdc71133834a659e5829a21a904cf39229db610572094198816c9c7b19f362b0848e10465abbc5ba045c4ece7a09e5360d8b92573e99ea8113388ecdc65c317e963ecac774dcebbdd3689428464fd5c277c6e52e42d46564c5ee16c88b9d4ba17124142291325aebe4a5c6af87da0afb1e4e8c659b984d94e3c156ad5d0a215ea7f0f441130d3f0e7faec9d416f8a548179015fe99cf4720831eb1cd8d2dc117f46b588515b233cbaccc0c0924339df477e1898b6a080a629b085196df664b810c378d9c7e2e8d6b8c9db1133f22e4", [[], [], []]}, 0x46a)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'caif0\x00', @ifru_flags}})
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r4)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4)
r5 = socket$kcm(0xa, 0x6, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r5, &(0x7f0000000080), 0x12)
close(r5)
close(r6)

[ 1322.048582][   T26] audit: type=1804 audit(1568484400.200:4136): pid=28106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2028/file0" dev="sda1" ino=16833 res=1
[ 1322.196896][   T26] audit: type=1804 audit(1568484400.200:4137): pid=28096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1174/file0" dev="sda1" ino=16785 res=1
18:06:40 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(r0, 0x1, 0x0, 0x7f)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140))
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r3, r4)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:40 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0))
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:40 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ac, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1322.304570][   T26] audit: type=1804 audit(1568484400.200:4138): pid=28096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1174/file0" dev="sda1" ino=16785 res=1
[ 1322.431111][   T26] audit: type=1804 audit(1568484400.220:4139): pid=28099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2028/file0" dev="sda1" ino=16833 res=1
[ 1322.517465][   T26] audit: type=1804 audit(1568484400.350:4140): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1174/file0" dev="sda1" ino=16785 res=1
[ 1322.617138][   T26] audit: type=1804 audit(1568484400.360:4141): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1174/file0" dev="sda1" ino=16785 res=1
[ 1322.687182][   T26] audit: type=1804 audit(1568484400.360:4142): pid=28096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1174/file0" dev="sda1" ino=16785 res=1
18:06:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0)

18:06:41 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x81000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:41 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ad, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:41 executing program 5:
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = socket(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x4000000001, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000000c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x0, 0x0)

18:06:41 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x1155d45c, 0x48800)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:41 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x88a8ffff, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:41 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ae, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:41 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r0, r1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
fstat(r5, &(0x7f0000001340))
ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40800, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = creat(0x0, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
fallocate(r7, 0x2, 0x55f, 0x200)
lseek(r6, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x80001, 0x0)
r10 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r9, r10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:41 executing program 4:
r0 = socket$kcm(0x2b, 0xf, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0xffffffffffffffd0)
close(r1)
close(r2)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES32=<r6=>0x0, @ANYBLOB="4c000000323744d5292b4841099000e001000000000041dc5e56c147f51873a1661eeb48b3c2bfe2c0ea2f34e9291e481aae18d2469dd3b0264069631a3477d12c640d043261c1682bbde363c4dda42d"], &(0x7f00000000c0)=0x54)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r6, 0x1, 0x1, [0x4]}, 0xa)

18:06:41 executing program 5:
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = socket(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x4000000001, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000000c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x0, 0x0)

18:06:41 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x9effffff, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:41 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8af, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070")
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
vmsplice(r2, &(0x7f0000001100)=[{&(0x7f0000001040)='L', 0x1}], 0x1, 0x0)
splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0)
close(r4)
r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r5)
ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x800)

18:06:41 executing program 1 (fault-call:4 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:41 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r2, r3)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000000)={0x5, 0x14, [0x9, 0x77a43ff7, 0x10000, 0xf72, 0x20]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)

18:06:41 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc00e0000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:41 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:41 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:42 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:42 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf0ffffff, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:42 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0x2, 0x2}, @func_proto]}}, 0x0, 0x32}, 0x20)
close(r1)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x6f34, 0x2, 0x0, 0x3, 0x81, 0xfffffffffffffff8}, &(0x7f00000000c0)=0x20)
close(r2)

[ 1323.769755][T28231] FAULT_INJECTION: forcing a failure.
[ 1323.769755][T28231] name failslab, interval 1, probability 0, space 0, times 0
18:06:42 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x40044160, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540)=r4, 0x4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r4, 0xffff, 0x4, [0x1, 0xffffffff, 0xfffffffffffffff7, 0xfffffffffffffffc]}, 0x10)

[ 1323.926207][T28231] CPU: 1 PID: 28231 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1323.935364][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1323.945611][T28231] Call Trace:
[ 1323.949015][T28231]  dump_stack+0x172/0x1f0
[ 1323.953370][T28231]  should_fail.cold+0xa/0x15
[ 1323.957989][T28231]  ? fault_create_debugfs_attr+0x180/0x180
[ 1323.963820][T28231]  ? ___might_sleep+0x163/0x280
[ 1323.968707][T28231]  __should_failslab+0x121/0x190
[ 1323.973758][T28231]  should_failslab+0x9/0x14
[ 1323.978296][T28231]  __kmalloc+0x2e0/0x770
[ 1323.982565][T28231]  ? mark_held_locks+0xf0/0xf0
[ 1323.987360][T28231]  ? mark_lock+0xc2/0x1220
[ 1323.991795][T28231]  ? _parse_integer+0x190/0x190
[ 1323.996671][T28231]  ? tomoyo_realpath_from_path+0xcd/0x7b0
[ 1324.002736][T28231]  tomoyo_realpath_from_path+0xcd/0x7b0
[ 1324.008308][T28231]  ? tomoyo_path_number_perm+0x193/0x520
[ 1324.013996][T28231]  tomoyo_path_number_perm+0x1dd/0x520
[ 1324.019475][T28231]  ? tomoyo_path_number_perm+0x193/0x520
[ 1324.025132][T28231]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1324.030951][T28231]  ? __f_unlock_pos+0x19/0x20
[ 1324.035675][T28231]  ? __fget+0x384/0x560
[ 1324.039899][T28231]  ? ksys_dup3+0x3e0/0x3e0
[ 1324.044325][T28231]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1324.050580][T28231]  ? fput_many+0x12c/0x1a0
[ 1324.055174][T28231]  tomoyo_file_ioctl+0x23/0x30
[ 1324.059965][T28231]  security_file_ioctl+0x77/0xc0
[ 1324.064932][T28231]  ksys_ioctl+0x57/0xd0
[ 1324.069101][T28231]  __x64_sys_ioctl+0x73/0xb0
[ 1324.073908][T28231]  do_syscall_64+0xfa/0x760
[ 1324.078430][T28231]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.084344][T28231] RIP: 0033:0x4598e9
[ 1324.088243][T28231] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1324.107860][T28231] RSP: 002b:00007fcae5f74c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1324.116326][T28231] RAX: ffffffffffffffda RBX: 00007fcae5f74c90 RCX: 00000000004598e9
18:06:42 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xff000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:42 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xffffa888, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:42 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x1)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = request_key(&(0x7f0000000140)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffa)
r3 = add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f0000000300), 0x0, 0x0)
keyctl$reject(0x13, r3, 0x40, 0x0, 0x0)
r4 = add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000380)=""/33, 0x21, &(0x7f0000000500)={&(0x7f00000003c0)={'sha512-avx\x00'}, &(0x7f0000000400)="786ac4082ccc736e2b2a059f8e0a3c6ef89be9208ea210b0546cfa1d46b23ea07d602bab8a9591a602f2baf4a187ea3710c39df703039b3e47d1531e1743627d2d4ac002390acdcbb7bfa434cd8e5c01ed6702af0e6f0364e204b96b352e4cd6b02382f070fbc088fbefd25b26a355e37dde8ecc6d52b6f620563fe5066710d74bb8ff1684e9235a4c7fa4d7d3c6c07e8b22247685771462273f88e11d353505ddbde7bc71d2e2f0c9a64dc1b816555ef450cde215cb88105e17cdcc6c1d28fb4e594baabcaf70ef9bbe9d16761624deb8345c559e8e206d", 0xd8})
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1324.124404][T28231] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004
[ 1324.132458][T28231] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1324.140546][T28231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcae5f756d4
[ 1324.148536][T28231] R13: 00000000004c2b85 R14: 00000000004d6228 R15: 0000000000000006
[ 1324.250366][T28231] ERROR: Out of memory at tomoyo_realpath_from_path.
18:06:42 executing program 1 (fault-call:4 fault-nth:1):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:42 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xfffff000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:42 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:42 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:42 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x48341)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
fstat(r5, &(0x7f0000001340))
write$nbd(r5, &(0x7f0000001780)=ANY=[@ANYBLOB="67446698020000000300fdff0100000099bf4ef224ffa972e7e04c4a21427fbd30415f6b"], 0x24)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80040, 0x0)
close(r1)
close(r2)

18:06:42 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x1)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
r2 = request_key(&(0x7f0000000140)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffa)
r3 = add_key$user(&(0x7f0000000180)='user\x00', 0x0, &(0x7f0000000300), 0x0, 0x0)
keyctl$reject(0x13, r3, 0x40, 0x0, 0x0)
r4 = add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000380)=""/33, 0x21, &(0x7f0000000500)={&(0x7f00000003c0)={'sha512-avx\x00'}, &(0x7f0000000400)="786ac4082ccc736e2b2a059f8e0a3c6ef89be9208ea210b0546cfa1d46b23ea07d602bab8a9591a602f2baf4a187ea3710c39df703039b3e47d1531e1743627d2d4ac002390acdcbb7bfa434cd8e5c01ed6702af0e6f0364e204b96b352e4cd6b02382f070fbc088fbefd25b26a355e37dde8ecc6d52b6f620563fe5066710d74bb8ff1684e9235a4c7fa4d7d3c6c07e8b22247685771462273f88e11d353505ddbde7bc71d2e2f0c9a64dc1b816555ef450cde215cb88105e17cdcc6c1d28fb4e594baabcaf70ef9bbe9d16761624deb8345c559e8e206d", 0xd8})
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r5, r6)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

[ 1324.676140][T28293] FAULT_INJECTION: forcing a failure.
[ 1324.676140][T28293] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1324.689411][T28293] CPU: 0 PID: 28293 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1324.698533][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1324.708602][T28293] Call Trace:
[ 1324.711916][T28293]  dump_stack+0x172/0x1f0
[ 1324.716280][T28293]  should_fail.cold+0xa/0x15
[ 1324.720909][T28293]  ? fault_create_debugfs_attr+0x180/0x180
[ 1324.726737][T28293]  ? lock_downgrade+0x920/0x920
[ 1324.731690][T28293]  should_fail_alloc_page+0x50/0x60
[ 1324.736906][T28293]  __alloc_pages_nodemask+0x1a1/0x900
[ 1324.742284][T28293]  ? __kasan_check_read+0x11/0x20
[ 1324.747307][T28293]  ? mark_lock+0xc2/0x1220
[ 1324.751737][T28293]  ? __alloc_pages_slowpath+0x2540/0x2540
[ 1324.757476][T28293]  ? __kasan_check_read+0x11/0x20
[ 1324.762537][T28293]  ? fault_create_debugfs_attr+0x180/0x180
[ 1324.768388][T28293]  cache_grow_begin+0x90/0xd20
[ 1324.773170][T28293]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1324.779433][T28293]  __kmalloc+0x6b2/0x770
[ 1324.783697][T28293]  ? mark_held_locks+0xf0/0xf0
[ 1324.788850][T28293]  ? mark_lock+0xc2/0x1220
[ 1324.793275][T28293]  ? tomoyo_realpath_from_path+0xcd/0x7b0
[ 1324.799012][T28293]  tomoyo_realpath_from_path+0xcd/0x7b0
[ 1324.804594][T28293]  ? tomoyo_path_number_perm+0x193/0x520
[ 1324.810259][T28293]  tomoyo_path_number_perm+0x1dd/0x520
[ 1324.815736][T28293]  ? tomoyo_path_number_perm+0x193/0x520
[ 1324.821401][T28293]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1324.827264][T28293]  ? __f_unlock_pos+0x19/0x20
[ 1324.832004][T28293]  ? __fget+0x384/0x560
[ 1324.836284][T28293]  ? ksys_dup3+0x3e0/0x3e0
[ 1324.840723][T28293]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1324.851159][T28293]  ? fput_many+0x12c/0x1a0
[ 1324.855607][T28293]  tomoyo_file_ioctl+0x23/0x30
[ 1324.860416][T28293]  security_file_ioctl+0x77/0xc0
[ 1324.865375][T28293]  ksys_ioctl+0x57/0xd0
[ 1324.869546][T28293]  __x64_sys_ioctl+0x73/0xb0
[ 1324.874165][T28293]  do_syscall_64+0xfa/0x760
[ 1324.878693][T28293]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.884594][T28293] RIP: 0033:0x4598e9
[ 1324.888689][T28293] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1324.908308][T28293] RSP: 002b:00007fcae5f74c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1324.916738][T28293] RAX: ffffffffffffffda RBX: 00007fcae5f74c90 RCX: 00000000004598e9
18:06:42 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:42 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0xcf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
mknod(0x0, 0x0, 0x0)
open(0x0, 0x14103e, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
dup2(r2, r3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
lsetxattr(0x0, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

18:06:43 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xffffff9e, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:43 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000040)={0x3, 0x6})
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340))
r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r7)
renameat(r6, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000100)='\x00')

[ 1324.924737][T28293] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004
[ 1324.932730][T28293] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1324.940726][T28293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcae5f756d4
[ 1324.949413][T28293] R13: 00000000004c2b85 R14: 00000000004d6228 R15: 0000000000000006
18:06:43 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:43 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x200000)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x7)
io_setup(0xa, &(0x7f0000000000)=<r3=>0x0)
dup3(r1, r0, 0x0)
io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}])

18:06:43 executing program 1 (fault-call:4 fault-nth:2):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:43 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e23, @rand_addr=0x1}], 0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200), 0x8)

18:06:43 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xfffffff0, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:43 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xfffffffffffffe78}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000540)=r8, 0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={<r9=>r8, 0x3, 0x63}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r9, 0x0, 0xf9cf0507cfea9ed4}, &(0x7f0000000140)=0xc)

18:06:43 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:43 executing program 5:
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff}, 0xc)
r0 = open(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/58)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x571, 0xc, 0x8, 0x6, 0xcbed, 0x9, 0x3ff})
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)

18:06:43 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:43 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x40030000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1325.571371][T28339] FAULT_INJECTION: forcing a failure.
[ 1325.571371][T28339] name failslab, interval 1, probability 0, space 0, times 0
[ 1325.597529][T28339] CPU: 0 PID: 28339 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1325.606774][T28339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1325.616839][T28339] Call Trace:
18:06:43 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118)
setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x17ad395c2cdc7741, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
syz_open_dev$vivid(&(0x7f0000001700)='/dev/video#\x00', 0x0, 0x2)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x11)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
sendmsg(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="a932ae11ab8ca2337f3a61ca408a209b9975d7bdccb81cc983dee5e58fe8a49d019d0d48e2c88df00616f8857d8fba5e72c987dfa6cd69f3564bd258db78c7f2e7eef48dbd5b9ebae2945ccf2f7ea0e89a848f8673483b2cfa9d43586cdf0f5174d4f2515498b41e52271344b8775a76e41dcbe205d7839adad6afa395dc3e12d1c1ee89cdaf2a10ff61d9d96ee2cad79bb7c1e2e22231", 0x97}, {&(0x7f0000000180)="094a0840c068c70648", 0x9}, {&(0x7f0000000440)="8b1f9eb856cd5963c629881d567a2fc83e73c7d7e4efe53af838cf34d40344dacef9f4a783cc92a5dc69bccb050a46c8eaec6742a85e3f71fa4337a267bd02658a8b07f29754fe439de634fe6cd7fb4b9e359d617a917c61dcbe4f686b1d966781f1e5731eaf4b8861843d7faa65820f519807705ba28d92f93a631ec75bc05f84a25421d83507e980d90c19b68ce3e8bfbb3d98544b08cba88faf4d609ea9eb11e30297d6d163b4fd77baeeb6f75d29d16c0a0057a42d12c3ea603fa1b2823379799b32a2ce54a0fdf08ddaf9aa2203e30132876e0364da7a70b06a3373", 0xde}, {&(0x7f0000000540)="2a3d8d291d0fd5bb8309a6b2c7b5b6b12e2141b2724b5bf2dd7f2db465a1", 0x1e}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1088}, 0x0)
dup2(r6, r7)
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r9 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r8, r9)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000016c0)={0x5, 0x0, 0xf9c})
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
accept4(r6, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x100800)

18:06:43 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffff7fffffffe)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x100)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.eve\xeets\x00', 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000180)={0x3, @output={0x2000, 0x3, {0x9, 0x3}, 0x7, 0x5}})
close(r1)
close(r4)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0xfffffd39)
ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x9, 0x1ff, 0x2, 0x6}})

[ 1325.620149][T28339]  dump_stack+0x172/0x1f0
[ 1325.624510][T28339]  should_fail.cold+0xa/0x15
[ 1325.629141][T28339]  ? fault_create_debugfs_attr+0x180/0x180
[ 1325.634983][T28339]  ? ___might_sleep+0x163/0x280
[ 1325.639948][T28339]  __should_failslab+0x121/0x190
[ 1325.644908][T28339]  should_failslab+0x9/0x14
[ 1325.649515][T28339]  __kmalloc+0x2e0/0x770
[ 1325.653770][T28339]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 1325.659597][T28339]  ? tomoyo_encode2.part.0+0xf5/0x400
[ 1325.664988][T28339]  tomoyo_encode2.part.0+0xf5/0x400
[ 1325.670209][T28339]  tomoyo_encode+0x2b/0x50
[ 1325.674649][T28339]  tomoyo_realpath_from_path+0x1d3/0x7b0
[ 1325.680296][T28339]  ? tomoyo_path_number_perm+0x193/0x520
[ 1325.685949][T28339]  tomoyo_path_number_perm+0x1dd/0x520
[ 1325.691452][T28339]  ? tomoyo_path_number_perm+0x193/0x520
[ 1325.697109][T28339]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1325.702929][T28339]  ? __f_unlock_pos+0x19/0x20
[ 1325.707672][T28339]  ? __fget+0x384/0x560
[ 1325.711852][T28339]  ? ksys_dup3+0x3e0/0x3e0
18:06:43 executing program 5:
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff}, 0xc)
r0 = open(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/58)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x571, 0xc, 0x8, 0x6, 0xcbed, 0x9, 0x3ff})
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)

[ 1325.716294][T28339]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1325.722554][T28339]  ? fput_many+0x12c/0x1a0
[ 1325.726991][T28339]  tomoyo_file_ioctl+0x23/0x30
[ 1325.731952][T28339]  security_file_ioctl+0x77/0xc0
[ 1325.736906][T28339]  ksys_ioctl+0x57/0xd0
[ 1325.741080][T28339]  __x64_sys_ioctl+0x73/0xb0
[ 1325.745999][T28339]  do_syscall_64+0xfa/0x760
[ 1325.750521][T28339]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1325.756428][T28339] RIP: 0033:0x4598e9
[ 1325.760336][T28339] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1325.780123][T28339] RSP: 002b:00007fcae5f74c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1325.788655][T28339] RAX: ffffffffffffffda RBX: 00007fcae5f74c90 RCX: 00000000004598e9
[ 1325.796846][T28339] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004
[ 1325.804837][T28339] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1325.812845][T28339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcae5f756d4
[ 1325.820833][T28339] R13: 00000000004c2b85 R14: 00000000004d6228 R15: 0000000000000006
[ 1325.842359][T28339] ERROR: Out of memory at tomoyo_realpath_from_path.
18:06:44 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:44 executing program 1 (fault-call:4 fault-nth:3):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:44 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
r5 = openat(r4, &(0x7f0000000140)='./bus\x00', 0x202000, 0xe3)
openat$cgroup_ro(r5, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0)
close(r1)
close(r2)
setxattr$security_evm(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "41d82c309bc4a94b947df81db4bf97b220c7c1d8"}, 0x15, 0x2)
r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r6)
setsockopt$inet_int(r6, 0x0, 0x16, &(0x7f0000000000)=0x612, 0x4)

18:06:44 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf0ffffffffffff, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:44 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="027f050000fe6717dd60c37a2aa95241f9117c610daa35efb202fb39a50d2ef05a85544c96934c959ef30d773e609ff0a831cb99f5d27507cd31fbf4e60000000082325a1e1ef21fd8f7b9239a625b"], 0x1a}}, 0x8844)

18:06:44 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:44 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8b9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:44 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x100000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:44 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dcbf3c00000000000070")
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff})
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r6 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r6, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x3cf443373c6014e9, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r7}}, 0x18)
close(r5)
r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r9 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r8, r9)
ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000380))
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=<r11=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000280)={r11}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={<r12=>r11, 0xaa}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r12, 0x300a}, 0x8)
r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff})
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x40003, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0)

18:06:44 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ba, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:44 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xfffffffffffffe0a}, 0x40000020)
write$cgroup_int(r1, &(0x7f0000000080)=0x8, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)={0x200, 0xc, 0x4, 0x4000, {}, {0x3, 0x2, 0x8, 0x4, 0x7fff, 0x5de, "4e95ca2c"}, 0x0, 0x2, @userptr=0xffffffffffffffff, 0x4})
close(r1)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
getpeername$netrom(r5, &(0x7f0000000000)={{0x3, @default}, [@null, @default, @null, @bcast, @bcast, @null, @null, @null]}, &(0x7f00000000c0)=0x48)
close(r2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x14)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x16200, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000540)={'vcan0\x00', r9})

[ 1326.690978][   T26] kauditd_printk_skb: 27 callbacks suppressed
[ 1326.690991][   T26] audit: type=1804 audit(1568484404.940:4170): pid=28400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2038/file0" dev="sda1" ino=16611 res=1
[ 1327.124160][   T26] audit: type=1804 audit(1568484405.370:4171): pid=28396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1451/file0" dev="sda1" ino=16530 res=1
[ 1327.174952][   T26] audit: type=1804 audit(1568484405.400:4172): pid=28402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1451/file0" dev="sda1" ino=16530 res=1
18:06:47 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c)
setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000040)=0x7, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:06:47 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x200000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:47 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8bb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:47 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x0, 0x80, 0xa188}, 0xc)
close(r1)
close(r2)

18:06:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:47 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x5a5f, 'syz0\x00', 0x8})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a)

[ 1328.907421][   T26] audit: type=1804 audit(1568484407.150:4173): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2039/file0" dev="sda1" ino=16564 res=1
18:06:47 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8bc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:47 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8200, 0x0)
close(r2)

18:06:47 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x300000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1328.972644][   T26] audit: type=1804 audit(1568484407.180:4174): pid=28431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2039/file0" dev="sda1" ino=16564 res=1
18:06:47 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)={<r6=>0x0})
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r9)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000100)={r6})
connect$netlink(r5, &(0x7f00000000c0)=@unspec, 0xc)

18:06:47 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8bd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:47 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x400000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1329.286409][   T26] audit: type=1804 audit(1568484407.530:4175): pid=28451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1453/file0" dev="sda1" ino=16628 res=1
[ 1329.373918][   T26] audit: type=1804 audit(1568484407.610:4176): pid=28451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1453/file0" dev="sda1" ino=16628 res=1
18:06:47 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x4000)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000000c0)={0x25, 0x7d66, 0x5, 0x4})
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000280))
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x200000, 0x0)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x4, 0xb, 0x4, "b3142206b49ac2c59fdbb77417e7a17a7b5a1b116a4c265638a2d770a5f4aafcf4f65f0768e9e3869b37d3a235f11ea3a89721f6f9e0ea7d0f2c2c7591b5fc56", "3dad627606df7220df6e4349798420135a02357b20734d5e89fff05eaea3ee5584f00909af169e4fe483da0d1422dc3fe9b429ba8b09de77e1e2fab340cdfba6", "15e619261302de672046ec56dce36bf7d88dfc2aebbfb68f81d286a821ff733a", [0x0, 0xffffffff00000000]})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000072, 0x0, 0x40000000], [0xc1]})

18:06:47 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8be, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:47 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x404200)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
fstat(r5, &(0x7f0000001340))
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000000c0))
getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000000), 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r6)

18:06:47 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x500000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:47 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x20080)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x12, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x10c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7aaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48000}, 0xa123a61fef627f87)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x6082, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040))
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7365637d726974790000000000000001000000000000000000000000000000006e000000d578ee3b1b7ef2e0fde312c39c011e5c2ff398c4f1e3c523c89cac23b05d097768f122b218319bd733dbca8137f48f82d9c26f88d1ea8a84a8dce2bc4be5d7818d3bd50124548326b65182f37c2d0cb08bf1ffee5f164c653cca38fc4a33f97012654303b3a66a27cca1d74b2373888793d1458823b36b8c9cc9b16ff18220d724e89145d5f81b4b9b885be9e9f3d6c2b8655a1d79adb19ecd626ee8a357a34085c2bf3c2dc277079265bb0527e0aaff9d"], &(0x7f0000000180)=0x92)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r10 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r11 = dup2(r9, r10)
fstat(r11, &(0x7f0000001340))
r12 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r11, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0x64, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r12}, @dead_binder_done, @release, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x29}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000004c0)={0x0, 0x20, 0x38}}}], 0xc1, 0x0, &(0x7f0000000580)="3e54c11d3540aec9618efa257445fc33b152cfd6695bd4a2fdea12c293bae273ed8ca58afb8f331937dd6dd1a715b4ae104e170daacc9ac97737a0dfbc32876b208a6d3f5e83b043b2eeeb7f0789ad2e2fe46191f760ee2177be4812c6ce4b180c9b7d632c14e260021bda3ed9330e02d73672d588c466a57cf03de8bea5669a73b0e3ad65aa64cef379d988a3e5d170cec9bc3aa0a870568b5c37f045ee3eafa29c771aa6002eabd70bf5760bc1ceb1b949cb7938e8af6b3d419197cbe9bd5d88"})

18:06:47 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:48 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8bf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:48 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x600000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1329.884592][   T26] audit: type=1804 audit(1568484408.130:4177): pid=28475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2041/file0" dev="sda1" ino=17041 res=1
[ 1329.952182][   T26] audit: type=1804 audit(1568484408.170:4178): pid=28475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2041/file0" dev="sda1" ino=17041 res=1
18:06:48 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x5b2d4eea058bc3a9, 0x0, 0x0, 0x0, 0x558f, 0x0, 0x6, 0x8001, 0x8001})
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/31, 0x1f)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic})
close(r2)

18:06:48 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x400000)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
fstat(r3, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000000180)=ANY=[@ANYBLOB="7072616e733d7463b37e56702c706f7a743d3078303130303030303030203030346532322c64666c746769643d", @ANYRESHEX=r4, @ANYBLOB=',cache=fscache,cachetag=/dev/dmmidi#\x00,access=user,cache=loose,loose,version=9p2000,access=user,access=any,fowner<', @ANYRESDEC=r5, @ANYBLOB=',measure,euid<', @ANYRESDEC=r6, @ANYBLOB=',\x00'])
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r9 = dup2(r7, r8)
fstat(r9, &(0x7f0000001340))
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480))
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r12 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r13 = dup2(r11, r12)
fstat(r13, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r14}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r15}}, {@measure='measure'}, {@euid_lt={'euid<', r16}}]}})
r17 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r18 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r19 = dup2(r17, r18)
fstat(r19, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r21=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r22=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r20}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r21}}, {@measure='measure'}, {@euid_lt={'euid<', r22}}]}})
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x6}, [{0x2, 0x2, r6}, {0x2, 0x1, r10}, {0x2, 0x1, 0xee01}], {0x4, 0x6}, [], {0x10, 0x2}, {0x20, 0x7}}, 0x3c, 0x2)

[ 1330.123070][   T26] audit: type=1804 audit(1568484408.180:4179): pid=28476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1454/file0" dev="sda1" ino=17057 res=1
18:06:48 executing program 3:
mknod(0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigqueueinfo(0x0, 0x0, 0x0)
getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x486441, 0x0)
fcntl$dupfd(r1, 0x0, r0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)}, {&(0x7f0000000500)}, {&(0x7f0000000680)="c6431388ea89565ecdc2ecd3328ccf7a8d455dabb7b0a23ae6", 0x19}, {&(0x7f0000000800)="aebb74c5cd5e2527d1cdfe91a2c1936730b42585d5461a1e46c76e92a034e5671901a5af50ce17e73e321aaab53fc0b6973de87d4d7c8f84a69c3080187140a5166615c4989a881fb94357d561c15f9f072d4b7a88f1772a5b1dc71659e44138672349f87b7e32d113d0a9171601dfb408", 0x71}, {&(0x7f0000000980)}], 0x5}}], 0x1, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000ac0)={0x6, 0x3})
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0))
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000002c0), &(0x7f0000000380)=0x4)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/de~/md0\x00'], 0x0, &(0x7f00000001c0)='ceph\x00<\t\xe2\xfa\x97\xb3\x10\x9b\x88(T\xffp\xa2{\xfd\x91]!U\xd5\xca\xaaR\x96r\x1cI\xfd\x1c\xab\xc1\xc6P\xc8K\xa4I\x06K0\xb2\xb1\xe5~\x868\x834\x99\x18\x16\x90bo\xc5\x19\xa6\a\x02\x14*K}<\xfe\xc4\xbc\n\x90\xad\xb8z;', 0x0, 0x0)

18:06:48 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x700000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:48 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:48 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
recvmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x1cd}, 0x2)
write$cgroup_int(r1, &(0x7f0000000080), 0xffffffffffffff4f)
socket$rxrpc(0x21, 0x2, 0x2)
close(r1)
close(r2)

18:06:48 executing program 3:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80000)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000080)={r1, 0x2})
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
setpriority(0x0, 0x0, 0x0)

18:06:48 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x800000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:48 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, <r1=>0x0}, &(0x7f0000000080)=0x8b)
setuid(r1)
fchown(r0, 0x0, 0x0)

18:06:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x10, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:49 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:49 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = dup3(r1, r0, 0x80000)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x200}, 0x2)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, 0xfffffffffffffffd, 0x2b15d508f42cfd3b)
close(r1)
close(r3)

18:06:49 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = dup(r0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xcd9, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x3ab)
r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000380)=ANY=[])
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000400)=""/148)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='nr0\x00', 0x10)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

18:06:49 executing program 5:
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
pipe2(0x0, 0x4000)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000102, 0x8972, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x108)
madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)={"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"})
openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080))

18:06:49 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x900000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1330.913922][T28545] QAT: Invalid ioctl
18:06:49 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:49 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340))
ioctl$TCGETS2(r8, 0x802c542a, &(0x7f00000000c0))
fstat(r5, &(0x7f0000001340))
ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000000))

18:06:49 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xa00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:49 executing program 3:
clock_getres(0x5, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x4)
dup2(r0, r1)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x307, 0x6, 0x1, 0x8, 0x10000, @remote}, 0x10)

18:06:49 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:49 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f00000000c0)={0x7bff, 0x401})
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0xecc, [0xff, 0x8, 0x10f, 0x1ff, 0x9, 0x4955, 0x5, 0x6, 0xffffffffffffffff, 0x38af, 0x2, 0xfffffffffffffff9, 0xd7, 0x8, 0x100000001, 0x86, 0x7, 0x6, 0x0, 0x8, 0x1, 0x7, 0x7, 0x6, 0x1, 0x40, 0xaa, 0x6, 0x100000001, 0x0, 0x1ff, 0x6, 0x1000, 0x4, 0x4, 0x6, 0x4, 0x5, 0x2, 0x3, 0x0, 0x9, 0x7, 0x200, 0x100, 0x6, 0x80000000, 0x7], 0x4})
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)

18:06:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4b6c, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:49 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xb00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x120)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0xfe8c)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x52)
shutdown(r1, 0x1)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x1a)

18:06:49 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x9c, 0x0, &(0x7f0000000300)=[@decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x0, 0x2, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/23, 0x17, 0x1, 0x18}, @fda={0x66646185, 0x4, 0x0, 0x3f}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/229, 0xe5, 0x0, 0x5}, @fda={0x66646185, 0x4}, @fda={0x66646185, 0x4, 0x1, 0x10}}, &(0x7f00000002c0)={0x0, 0x28, 0x48}}, 0x1000}], 0xcc, 0x0, &(0x7f00000003c0)="a759efd227b929a2b40a6dd89a25ce224e21a6c71117fb0e7b15664a867fd1dfc148b97f7c9aa3f6b963b4d61df8320029a3cded7362165265f78c71a9afa9112e74afae1ca79286f3aaba6eaf8e08b67d959d3459ce9f225151786206776c096a530c667a47e8ac3ef888f787752621a850d0c12903290e645f5545bb763e6dd07fec9915e920cd0f0db63dfd7e4853598f5dac2e3e4aa037f5cd6d371a244d67e823b9dd1c1551753e15305cf825ae2edb723f4392b37186d47fd3be22ff7b2aede76b142bbe5ae77a391b"})
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2198968b7df924a1}, 0x0)

18:06:49 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:49 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f00000000c0)={0x7bff, 0x401})
dup2(r2, r3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0xecc, [0xff, 0x8, 0x10f, 0x1ff, 0x9, 0x4955, 0x5, 0x6, 0xffffffffffffffff, 0x38af, 0x2, 0xfffffffffffffff9, 0xd7, 0x8, 0x100000001, 0x86, 0x7, 0x6, 0x0, 0x8, 0x1, 0x7, 0x7, 0x6, 0x1, 0x40, 0xaa, 0x6, 0x100000001, 0x0, 0x1ff, 0x6, 0x1000, 0x4, 0x4, 0x6, 0x4, 0x5, 0x2, 0x3, 0x0, 0x9, 0x7, 0x200, 0x100, 0x6, 0x80000000, 0x7], 0x4})
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)

[ 1331.785974][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1331.798787][   T26] kauditd_printk_skb: 24 callbacks suppressed
[ 1331.798803][   T26] audit: type=1804 audit(1568484410.040:4204): pid=28587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1191/file0" dev="sda1" ino=17042 res=1
18:06:50 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:50 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:50 executing program 5:
ioctl(0xffffffffffffffff, 0x94ae, &(0x7f0000000100))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='^posix_acl_accessp\x04p1vk\xee\x05\xdaY\xd4\x8d\x13\x06\xce\\\x89\x18R\xa9{\x05#\a\xf6$\x0fcR\xc8\x15\a\x92]kL\xf5\x1f\x8b\xb9`0d1\x1aA\xc9\x16\n4:\x12\xf1\x82Z/\x02\xb0\x92w\xdd\xbfm\x1e\x12Gh\xbd\x8a\xcej\x19\n\x81\x86\xc9\xdb\xa3G\xa9\xa1W', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68)

18:06:50 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/172)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
r6 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r6, 0x0)
fcntl$dupfd(r5, 0x406, r6)
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r3)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r8 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r7, r8)
ioctl$CAPI_GET_MANUFACTURER(r8, 0xc0044306, &(0x7f0000000000))

18:06:50 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1332.148487][   T26] audit: type=1804 audit(1568484410.390:4205): pid=28607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2047/file0" dev="sda1" ino=16515 res=1
18:06:50 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xd00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1332.255496][   T26] audit: type=1804 audit(1568484410.450:4206): pid=28607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2047/file0" dev="sda1" ino=16515 res=1
[ 1332.337593][   T26] audit: type=1804 audit(1568484410.480:4207): pid=28607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2047/file0" dev="sda1" ino=16515 res=1
18:06:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4c00, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:50 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x3ac)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000001080)={r0, &(0x7f0000000000), 0x0}, 0x20)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'syz_tun\x00', 0x2}, 0x18)

18:06:50 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x8380)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "1bfd32cc425b5945", "66727ed84d01d81ddcaf18b43bf49385", 'OW/9', "df0a543cf8c28b4f"}, 0x28)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:06:50 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xe00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:50 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:50 executing program 3:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000340))
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r4, 0x0)

[ 1332.749354][   T26] audit: type=1804 audit(1568484411.000:4208): pid=28631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1193/file0" dev="sda1" ino=16977 res=1
18:06:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4b6c, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:51 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1332.827490][   T26] audit: type=1804 audit(1568484411.020:4209): pid=28629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1460/file0" dev="sda1" ino=17121 res=1
18:06:51 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:51 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8c9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1333.043737][   T26] audit: type=1804 audit(1568484411.020:4210): pid=28631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1193/file0" dev="sda1" ino=16977 res=1
18:06:51 executing program 3:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000340))
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r4, 0x0)

18:06:51 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1000000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1333.214997][   T26] audit: type=1804 audit(1568484411.110:4211): pid=28640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2048/file0" dev="sda1" ino=17169 res=1
[ 1333.333023][   T26] audit: type=1804 audit(1568484411.570:4212): pid=28668 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1461/file0" dev="sda1" ino=16994 res=1
[ 1333.446544][   T26] audit: type=1804 audit(1568484411.580:4213): pid=28665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir984114636/syzkaller.FZoCjz/1461/file0" dev="sda1" ino=16994 res=1
18:06:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4c01, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:52 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ca, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:52 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1100000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:52 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2d, 0x20, 0x0, 0x0, {0x1d, 0xd602}}, 0x14}}, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x7a8365e7bba6f693, 0x0)
dup2(r1, r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000540)=r5, 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0xfff, 0x30}, 0xc)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340))
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r8, 0x800443d2, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]})

18:06:52 executing program 5:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
open(&(0x7f0000000000)='./file0\x00', 0x82000, 0x291)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/41, &(0x7f00000000c0)=0x29)

18:06:52 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x7, 0x9, 0x84, 0x2f4, 0x1, 0x2, 0x7, 0x4, 0x1, 0x4, 0x57, 0x56})

18:06:52 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8cb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:52 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1200000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:52 executing program 3:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000018000000020000240000000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x4e9ae11bf6d38dec, &(0x7f0000000040)=""/80, &(0x7f0000000140)=0x50)
personality(0x4000000)

[ 1334.248408][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1334.254304][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:06:52 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1300000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:52 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8cc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1334.463036][T28698] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1334.515335][T28698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1334.547798][T28698] F2FS-fs (loop3): Wrong SIT boundary, start(2048) end(3072) blocks(0)
[ 1334.562607][T28698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1334.620598][T28698] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1334.628684][T28698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1334.648606][T28698] F2FS-fs (loop3): Wrong SIT boundary, start(2048) end(3072) blocks(0)
18:06:52 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1400000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1334.688653][T28698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
18:06:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4c03, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:53 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8cd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:53 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1500000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r2 = dup2(r0, r1)
fstat(r2, &(0x7f0000001340))
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={<r3=>0x0, 0x1000, "4f11ee70052a5eacda795884942a2bcf827ebb5ba4514392c4b70c6207485a2c50e2f85f13eb50d8ce28fd16ac69f8ea01ccc9069f53df1e1289fbbcd52f7164729e2c5d404a1f3842bb2d5561ff0123b0491d4e0f64f75807e9bbbf5f6daae58a07017f559a0ec50c693920ee119f73d973e66044531dd23919db4ca56b21e288ba8a67ef7222394d05eda7dd606fb3e82ecbc733cee0c99eac8050d4b963beabf2675a7e217826fdb96895e806fc06b3eb452360cb27f77dc743b8226b1b7105ba8b5ddda66b3eded219ee048896a21774526e26b03bcfe9deffce480a1b58a487ffbe4690deabeed507c2b1ce1da453d6f292d84c5c17170bf56df65a0073d3f3a78c8613ffb3c2221f40fa12575afb6591aa5e452c7d0100aa605b6cd3fb6765ccb8816f6c6eaad64c3329891e6a885d1d790cafa758313f9b8c4eba28dde2cda9ae3548c3cd824251c3ebcee145714d51f773431ebbd3a0d73195502f992840d1adc8220d3f89a4bee5e9d30e55fcc7f30f60c0917935564ad4387e39742561d31633451b3d5baebef672be775308e10cc6a458e08446a0aec7ae54b2c1eb2c43a17599e20af0a5eb49c70f5b3f9bf2df92be8c73cbb499d842401d431fbe493a911b3f7eac3d2d0cc5db24be7fea83451432a68eeb77dfee4233e0fd6aa9f4dcb82e16c27b5fe6e2037135bb258f203b505a85f5c7d3c25d575eda2e3395428725c45a40fbd7d4c01c51449e2a061295687b1b03c5bc69d3d6b49a66e8a848b7971055e3d2833f5c52f88564b013825f58768efb50ff03a8e01f69bd35d272e84ecf5bfb5d840c46ecddf926c7d86bcb135dd620f6e00cad9b4d0ae5305760be5622d1f0f9352b256b5cc01fb218e39c76ff0cb5d1f79606c52d43005f37f42607fbb09960a2326cf73d31683b40ef68726a12642ec7576b9326e422e9f2353f4d11c491223f73f60fc6b077630b097a53066cf2e9f4ab654bb672f4e5469c71342ccc528034eeb9c653e0911d93a5aa7fe43912b8c51979b231fc07473975ea348754e0dcf06487cca3a293e69975bb10860fe06027e037b6bcd4f46617f77bba72d3abf2813c57455e5be1e21eda66e8f0ec52bec21a8de3876db6a3e59270720fe659e298d558d85e4a3d7d5dfbb7de484b24ccb0830ea45d14de09381241a5e9553ae92507c559ae3d0d100bc404c09b2c73136879793d47de6cf9bb80f752275d89e319004ca7ada465e196e80a1c9c4e4ff1fadf8b80d82fbc8618e49c1de56c7a5fa844c9304f4bae89bc556d32b6a209cba03dbebab2660f4a08e99d9ebb2ee0e770191b5662072a9437432db291307f64c316a58c60f649a0a4dcb6427513ac7b8db2914e1fc5c7f1ad3aabd2f5be4687d67fc2f2448c54b67e67bcddc400776e66840fec71a8501029463b8e8d68d8267c9f2c362056647f12dc1630aa6819d0051329ffc617148f58f6893947e69e608b597e9863a17ba02b596b82286e9890ebcfe0680846eda1272aa7a3199ed1d1c286188bb85cb4e67239b3e6f40ac684b293867fda18396d2974629c2bde1d0dab835f2434dd71a25393e9c91bdb274be72996cb82e509720c50e9726d2a22464dedd60042138d0d2a4d801a727f20d231563284053ce0cf09773d12ace1bc7a625024e9990d8081fca4a33d8eb2ff8dd8e6299bb3d82ee7b5d4fdfb75dc25c1f31eb46861483781f4f59a4f848129b490e882014d80a862844053b64f2be5a3119478be921f24ffe6d342a7828f1ee8ba42760024acc795a6e7da26ef282f3ec6d11735d09391434568934d531e8a189a72aff2e698b96f898d2f1c9d9c520d7c6a5fe071bbfd5b2cca2bb5069a66d34e4520d179f4be0f45d5d850bb3a275ea9658211650f8d2716115f2ff7f97ac2364952bc2e4c424d5c2d4a3af5d56bee65ea4a4354ce7f5164a52fd56fd7d19e4a03c9bd7f15bf907dba7bd9b66d9aea66750c1e383989ee057dc3f859c70dbb1ba5c5354a7f91ea08e12cc866964bd1563ffa8f98e34519e14a1d2767e7cae28228aad326a71d8c4601653e6902c567065123707a20d1ea68ad262458febf3ec13fc5610cc629cd6afe12369dd37223941c695a310907c047205e3922ca8b8de7dbc4c80a41a9e0545406f9498b5bbe2678fd286733f7d07f43869655d00fa058e1287a3dfb27c986721a257ed2834e2f3ffe0fe930385e4c3fd0a52f4a18e0c00eb97ea538acab96d89c21734c223c521038645ecdab3d7602b39d5133a98ee2b951f3bab61fb76d52a0ec97d020f762627f731292cc552a735ef4a30ea570028fe9105b695ed848eede76bb0e375cf8c89c2c5efbb6ebe9e83ca3484ffd86ba47de146426dab019ac20dc962b98cf4134307d92ff660324bcc721d32c1bfe64ddbfd4a8d2516f8d44e7480585f47665e14cdfb1974a711f2fca801a904dad909d1da5568392de3a511f934f7b440d2b974007759ad4531beb1984b5bea6a479c6a06e9712d8103884330b1ade44eedd0cc45ed58bc2a585f79195ab481833a55014b001961baca47c3ffb727a9102be0c4989c2757c1cbe20c19ea6a7871337b1414b8f9292bd9f9ff51fd114ed2a7539cc4c9eca37927ed97f1fb09235dc7fc9115d11266251255128a2c580726f5ffaee21864cf9651f01a0f30b22e9ba6a1155660bcc0255e25a8ffc90f51c22db61705acb58c58aa273a4e51121e185a1189a15211d0afbc1c139f8de70ada6eb3c594324f24df1c278db18d611eece1994f05ecad54dc2306ef6bcf63e1b80e8ae2014a32723b614bc1a561fd6233f792e9eccf47028c72c9b0981eeb57bb4229dbb56dfe072985bfe49795a5c3660b2f1cd8a870684dd3547b47f1b018ffce374563852dd2bba5b55ac9bf2e5c0c61688dfeb05f31709a6eb36fa9770b01f85c9c18ed0d2808359caa098fa32b95242836e5650ec42e71ad1575f7219cb1c2fa10c72559653d9ddfdd817e95ca2d5053901d78d47aa8ce685d2c8ab0c515c557cf2789008f6e195abe77e72d520ca5188742c1cae1580d73a261ec68f7018f969213e96442a4e94b2ffbf46a9d6dd3095df169377035b633f951832335e3496da7cf8e2cc5a81fd745e8a2b87fe90603d2f13fa43a9bb43636572e8f6085031980702f1962a77368f6299cb9caf1d10d1bf7c7e01ff6ba4f333d56456331b07155bfdc7ab5c11b0683e52d0eb3b35fb00b1207cb9908b447cdae0a4f32c7894e36f5f8aee0aa999fc6987ac36fff4daa349fe0aa44db9ff429eb120e75b25a8636791834f653739716c508be51d41bca26f171263b1bad4795eef133f3fe5ea828be4f0243f5ed234550c1d18bd45e2d010a3852ea78b5e1108f3f62e4a7fe1c998d76250ed3084771a7e11c33ff7ac692df30facb59a5ed5a759f804d8ded79b1137a199cad4a199d9cdc64ea2a8ca3ab5b1d02801c9ee8ad2d0d434d34b16fde17ee0cb098234e25e46aa670fdefda8378d1e451e7fd22616240b9ef75e8b4f5fb65ff3a8c9bde3577194d2b0726286ff12cef3eb0dd2c58bf38fe8be8b7f802c8ad5438ba2df48d944f746dcd533a12a7c1ad2a61dd3e9611dc37e9227715544d512caaa53042094b1f192c2450c85423934d7b13b178fb95fc5c8b7e8a3fab7ec262e5a61751999bd884326d454472f5c01ab1791d242f35a06069a40de78f84ef784fc0db81ef2b84c4aa0f2d6b70d12eb750274a686b3700dad15a1b938096280b0e803e10aacfad8b6f56108c1b59dca7a59941bba71b1efc1e3c5c06df8fec68f2f0f65fe6da28cb1561b6245f26223e481e5a5f8f94be7916ad249d6ad0a482302dfc6c7a2bb2d7609d88518d46ec68b57ef0707ab0952fcc4645af021c8961427b32bbaa489fa2c6849e6007b7b6575738003e4021d0005eaaadb83c49556f94180c0d185d29d65c5ef205f96bf01d99eefe275600b77557a72afb0990d487554a49132738da5c10ef264a1683e19bb85eeb66a937da7f9e3f3de148733cf5e4fe7ca7a2885fb75e5c7ba627736ee269aff55a9effe14bc5f2deaaf45f7075ebcc7f91195c346413c954090987508880f408993fe97ac78c235d545179700f51e9b710f0e60a60da1ef4403371406cd69e8467fbccce233dc9dc46f5238ed2fb19205880bfc970c03a0672f850a62774a0488c3ee80e2cb96419ded2ae28763425419fb041764a4d64da259793338efaf60f0cfba99e978f6eba21def37bfb3bbdb672285bccd92f370ce88e330744baf8588d3149d8dd30b40e4f8371c152f4a141adcb1c86ba3aeb5e5903495be58c2300b92a2590670b1dbed01dd768a0b5bd3d140bb0b738733771be63eb85367f427cba8567f2b9c1f9a41c357c832c28543d20ddb284f586b4579dd275626bb6c21ac566eb86dba006548e6ec4c797ac87a472fede644f19193cf152b5fcaae7b8fb05b2e5841d969adea8566aa3fb2dc14611d44ef296ebdceba177e4b6eb130362a2a6fd3285ef544eafcf05d42612fdf02df3d4510080831e4f4cb54e304c084d5f8e21102314de118607d7c8f5e8502237b7c3aca82bd6cf8ab00155889d7e9dacd6b12c479469085abbcfae320f3906b9cca924fded9feac58bbbab21847d795d8d3747eb157b3dec786a9bfa45a1484f575a04ee4ee6d86d65a5b009715ef0d1328995ad675f88b939a7db9c03789f7ad4dcfd0104936f4c270a302e2fb63da7c4a0e0737ec8e683cafd4cd7a1a20e1703251ab94e6069abd3fbc3da6428827d42bdc2e3a0247c93e727d4f683b2cf232280b1d32a920c4dea5ee251869aaefa83a653cbe644143692374d51e520dc124e8d31a50ccce4f53c47f66c5a1927ef49aece80d619ce3424a4eaabd98fbb153b06a480e25afa76132de83dd608588f1dd52016f36f3e129ecd3b2a0ccba956bbc29533ec78e72b0d585059f9f0e96211228b28db793b21043000a772449f9e82d122066688b93bdbfc3c84d09390f2769acc62c7c9e6eff90a9ea64ab4d5fa1d56b818151bfe363d2e92109a9e2d87276576ce5258c5bb0b9e2be43eb2feb112a8c3d3023185205c6d26c68212759b2463748c6fbec54e4f93056bdbd6286603918a0faa8bb164b6c231f7cffa3f3f50dc024b6d4cbfed2d955ec87bb5c65d89d977fdcefe7d7fed330d6119846be958c2f7cce0e9722a15530fa81eb3aebabb3adec6f367f28822176dbca451db618a314703aea0d91a61bf642eb0873a05a1cea445453db790a98700916de4551200b1d2449736e9694adac584c57a8b475d72243920305080d89b6812e2f7c16c3c4fe02bcecb213d85b1538e1b3012cdb113c97705c72aa315bb1b23bae4f7468bc557015ab5288841a0224f82c0b184d6c79b5ce5e61923a5374adabe8804642b2d89cce636a2061e06148a60ccc5e55ad41da2a521e385bc5126c962cc5fd5724ef0584c1a9c40e00a9f35ff88cc32344961621c5a8440f9fab489e95533b59d4b8c9f8ae86829df52bc77a91849969955ca413245aa1592dd9ec0277c8708d71f76df5d57b7a727b8cf10d9b90f40c655c40c505025993445712f5e5c6b736b9bbe5d9fe9ebbd756eef0f6ea268ee8694fa8564085cad163599d85742f48cc364a24469b1c19ec88e8d94542d1777a2c294fce69374c3c82d3c4c2f74750efdb13e0a7d4476e2c815ed5d33cf1a1fe97de4ece8a3c05d758c2dada7432f5c6c7fa49f80d3fb4f57f056f4b365fa324d2056396c552b4ba629edf857db5fcf69f6de9ebc23f8a7e0d061479667e"}, &(0x7f0000000080)=0x1008)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x8}, &(0x7f0000000140)=0x8)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7dee, 0x1, 0x2, 0x1, 0x80000000, 0x4800000}, 0x20)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000})
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000001280), &(0x7f00000012c0)=0x4)

18:06:53 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ce, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:53 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1511000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:53 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8cf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:53 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1600000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:53 executing program 3:
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
socket$netlink(0x10, 0x3, 0x16)
listen(r0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r1, 0x0)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

18:06:54 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:54 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1700000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:54 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000050700"/20, @ANYRES32=0x0, @ANYRESHEX], 0x3}}, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "ca5ff99c5cb221b02d0b9d34c8fd74a1"}, 0x11, 0x2)
r1 = socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)

18:06:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x5401, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:54 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:54 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1800000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:54 executing program 3:
setrlimit(0x0, &(0x7f0000000280)={0x3, 0xc})
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x12)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000140))
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000340)={0x38})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1004901ff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lsetxattr$security_smack_transmute(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x2)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r2, 0x0)
bind$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x2}}, 0x10)
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x200000)
getsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=0x4c)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000300)={0x5, 0x6, 0x68e5, 0xfffffffffffffffb, 0x1})

18:06:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r3=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r2, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r3}}, 0x13a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=""/254, 0xfe, <r4=>r3}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=""/177, 0xb1, r4}}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100), 0x98)

18:06:54 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:54 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1b00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r3=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r2, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r3}}, 0x13a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=""/254, 0xfe, <r4=>r3}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=""/177, 0xb1, r4}}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100), 0x98)

18:06:54 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:55 executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x201000, 0x0)
chroot(&(0x7f0000000140)='./file0\x00')
chdir(&(0x7f00000001c0)='./file0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f00000002c0)={0x100, 0x1000, 0x5, 0x3, 0x2, 0x2, 0x545e, 0x200, 0x2, 0x644, 0x6d, 0xff, 0x5, 0x81, &(0x7f0000000480)=""/219, 0x7, 0x8, 0xb31})
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00')
ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000580)={'nr0\x00', 0xcbb, 0xaa06})

18:06:55 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1c00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r3=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r2, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r3}}, 0x13a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=""/254, 0xfe, <r4=>r3}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=""/177, 0xb1, r4}}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100), 0x98)

18:06:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x541a, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:55 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1d00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:55 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:55 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={<r3=>0x0, 0x1}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x81}, &(0x7f0000000180)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)

18:06:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r3=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r2, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r3}}, 0x13a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=""/254, 0xfe, <r4=>r3}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=""/177, 0xb1, r4}}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100), 0x98)

18:06:55 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1e00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:55 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r3=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r2, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r3}}, 0x13a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=""/254, 0xfe, <r4=>r3}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=""/177, 0xb1, r4}}, 0x10)

18:06:56 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x1f00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:56 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
creat(&(0x7f0000000000)='./file0\x00', 0x100)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r2=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r1, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r2}}, 0x13a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=""/254, 0xfe, r2}}, 0x10)

18:06:56 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2000000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:57 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2100000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
creat(&(0x7f0000000000)='./file0\x00', 0x100)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, <r2=>0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r1, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r2}}, 0x13a)

18:06:57 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={<r3=>0x0, 0x1}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x81}, &(0x7f0000000180)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)

18:06:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2200000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2300000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:57 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
creat(&(0x7f0000000000)='./file0\x00', 0x100)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10)

18:06:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
creat(&(0x7f0000000000)='./file0\x00', 0x100)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000017000000030000000a0000000000000b030000000f0000000000000c05000000060000000000000901000000060000000000000700000000006100"], &(0x7f0000000600)=""/181, 0x4b, 0xb5, 0x1}, 0x20)

18:06:57 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2400000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:57 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8d9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2500000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})
creat(&(0x7f0000000000)='./file0\x00', 0x100)

18:06:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8da, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x5450, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:58 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={<r3=>0x0, 0x1}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x81}, &(0x7f0000000180)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)

18:06:58 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0xfffffffffffff0e9)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="ae280f35fda842121097e6a6a78737ac07bfbf8b4ef47e6c66a28b2e0a09f61bcdac4d9bd93cb5cd56c0f7203cb8001697547fb147cfc9f8137041048f105561354c90d8e4412211f5912658ee1b4002a861144e3b79daf71d9eec6f92c7711962afb5a54a131882c3b141d3b639a5ee130b27bf2d4c962d84d1f8eeab3b1c3d1764ee37aab6d26502", 0x89, 0x20044885, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
prctl$PR_SET_DUMPABLE(0x4, 0x2)
close(r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000300)={0x405}, 0x10)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x200, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x40a5, <r4=>0x0, 0x10000, 0xffffffffffffff00})
ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000200)={0x0, r4, 0x10000, 0x5})
r5 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x1, 0x0)
ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000280))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x40)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000340)={0x0, @aes128, 0x4, "f5f5e52055141af3"})
clone(0x22086607, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
close(r2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x444800, 0x0)

18:06:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2600000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:58 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
write$cgroup_int(r3, &(0x7f0000000080), 0x20d)
close(r1)
close(r2)

18:06:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8db, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:06:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2700000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:58 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8dc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:58 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x20}, 0x8)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x6, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r5, r6)
close(r6)
socketpair$unix(0x1, 0x8532f8571ce6d5ad, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r7)

18:06:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:06:58 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2800000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1340.692216][   T26] kauditd_printk_skb: 8 callbacks suppressed
[ 1340.692230][   T26] audit: type=1804 audit(1568484418.940:4222): pid=28924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2051/file0" dev="sda1" ino=17281 res=1
[ 1340.869713][   T26] audit: type=1804 audit(1568484418.950:4223): pid=28924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2051/file0" dev="sda1" ino=17281 res=1
[ 1340.999783][   T26] audit: type=1804 audit(1568484418.950:4224): pid=28925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2051/file0" dev="sda1" ino=17281 res=1
[ 1341.048466][   T26] audit: type=1804 audit(1568484419.010:4225): pid=28924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2051/file0" dev="sda1" ino=17281 res=1
18:06:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x5451, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:06:59 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8dd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:59 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e20, @multicast2}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x3, 0x0, 0xff, 0xe, 0x1, 0x1}, &(0x7f0000000200)=0x20)
close(r1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
r6 = getgid()
fchownat(r2, &(0x7f0000000280)='./bus\x00', r5, r6, 0x100)
close(r3)
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x90b6a4fc3d2427db)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r7, 0x0)
ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000000c0))

18:06:59 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x2900000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:06:59 executing program 3:
perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8df, 0x50500)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000680)={"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"})
write$cgroup_pid(r1, &(0x7f0000000640), 0x12)

18:06:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:06:59 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8de, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:06:59 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4000000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:06:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:06:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
setresuid(0x0, r1, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0)

18:06:59 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8df, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x5452, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:00 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4800000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:00 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x0)
pipe(&(0x7f0000000000))

18:07:00 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:00 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:00 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x4900000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:00 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r5)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x111, 0x24df30297abda63e}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc)

18:07:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0xaa1b2ed293b52abc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:07:00 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:00 executing program 5:
r0 = syz_open_dev$video(0x0, 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:00 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x6000000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1342.411792][   T26] audit: type=1804 audit(1568484420.660:4226): pid=28995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2053/file0" dev="sda1" ino=16520 res=1
18:07:00 executing program 5:
r0 = syz_open_dev$video(0x0, 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

[ 1342.551939][   T26] audit: type=1804 audit(1568484420.690:4227): pid=29005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2053/file0" dev="sda1" ino=16520 res=1
[ 1342.626977][T29008] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
18:07:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x5460, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:01 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xab86b8166053bf96, 0x0)
write$cgroup_int(r3, &(0x7f0000000080), 0x12)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
getsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
close(r1)
close(r2)

18:07:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x6558000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:01 executing program 5:
r0 = syz_open_dev$video(0x0, 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:01 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:01 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x8100000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:01 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:01 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x10)
write$vnet(r2, &(0x7f0000000180)={0x1, {&(0x7f00000000c0)=""/175, 0xaf, &(0x7f0000001800)=""/4096, 0x2, 0x4}}, 0x68)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r3)

18:07:01 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x88a8ffff00000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:01 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:01 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x6364, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:01 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:01 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = dup2(r3, r4)
fstat(r5, &(0x7f0000001340))
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101000, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r11=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000540)=r11, 0x4)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000300)=0xff, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={r11, 0xbc, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x3ff, @remote, 0x2}, @in6={0xa, 0x4e23, 0x20, @dev={0xfe, 0x80, [], 0x14}, 0x80000001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x800, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @empty}, 0x7}, @in6={0xa, 0x4e20, 0x8000, @ipv4={[], [], @remote}, 0x380}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f00000002c0)=0x10)
r12 = dup2(r6, r7)
fstat(r12, &(0x7f0000001340))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f00000000c0)={<r13=>0x0, @in6={{0xa, 0x4e20, 0x101, @rand_addr="5fc02ff11dc09f0c4fe67cd5b60645d3", 0x6}}}, &(0x7f0000000000)=0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={r13, 0x8001}, 0x8)
close(r2)

18:07:01 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x9effffff00000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:02 executing program 5:
syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:02 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

[ 1343.725009][   T26] audit: type=1804 audit(1568484421.970:4228): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2056/file0" dev="sda1" ino=16657 res=1
[ 1343.866656][   T26] audit: type=1804 audit(1568484422.010:4229): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2056/file0" dev="sda1" ino=16657 res=1
18:07:02 executing program 5:
syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:02 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x341002, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
write$cgroup_int(r3, &(0x7f00000000c0)=0x80000000003, 0x1c1)
close(r1)
close(r2)

18:07:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xc00e000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:02 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

[ 1343.976831][   T26] audit: type=1804 audit(1568484422.080:4230): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2056/file0" dev="sda1" ino=16657 res=1
[ 1344.146124][   T26] audit: type=1804 audit(1568484422.090:4231): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2056/file0" dev="sda1" ino=16657 res=1
18:07:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x8907, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:02 executing program 5:
syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:02 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0)
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r3)

18:07:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xf0ffffff00000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:02 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:02 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0)

18:07:02 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:02 executing program 4:
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=""/85, &(0x7f00000002c0)=[{0x8, 0x4d, 0xf8, &(0x7f0000000140)=""/77}, {0x401, 0xcd, 0x4, &(0x7f00000001c0)=""/205}]})
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0xfffffffffffffffc)
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r4)
ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000340))

18:07:02 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:02 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xff00000000000000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:02 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0)

18:07:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x890b, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:03 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8e9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:03 executing program 4:
r0 = socket$kcm(0x2b, 0xb618cc85b1beb98f, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0)
ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040))
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:03 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0)

18:07:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0xfffffffffffff000, 0x0, 0x0)
syncfs(0xffffffffffffffff)

18:07:03 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ea, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:03 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x35a, 0x0, 0xfffffffffffffd82}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x2a000, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$TIOCCONS(r5, 0x541d)
r6 = dup2(r3, r4)
fstat(r6, &(0x7f0000001340))
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000040)=0xc2)
close(r2)

18:07:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x2)
syncfs(0xffffffffffffffff)

18:07:03 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:03 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x890c, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:03 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8eb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:03 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:03 executing program 4:
r0 = socket$kcm(0x2b, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
fsetxattr$security_smack_entry(r3, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='\\ppp0ppp1.vmnet1\x00', 0x11, 0x0)
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:03 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x3)
syncfs(0xffffffffffffffff)

18:07:03 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:04 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], 0x0})

[ 1345.729813][   T26] kauditd_printk_skb: 1 callbacks suppressed
[ 1345.729830][   T26] audit: type=1804 audit(1568484423.970:4233): pid=29191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2062/file0" dev="sda1" ino=16659 res=1
18:07:04 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

[ 1345.807005][   T26] audit: type=1804 audit(1568484424.030:4234): pid=29201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2062/file0" dev="sda1" ino=16659 res=1
18:07:04 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], 0x0})

18:07:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x4)
syncfs(0xffffffffffffffff)

18:07:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ec, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x8912, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:04 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], 0x0})

18:07:04 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev1kvm\x00', 0x200c0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r7, 0x8200)
r8 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r8, 0x0)
r9 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x6031, r9, 0x0)
r10 = accept4$x25(r9, 0x0, &(0x7f0000000100), 0x80000)
r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r12 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r13 = dup2(r11, r12)
fstat(r13, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r14}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r15}}, {@measure='measure'}, {@euid_lt={'euid<', r16}}]}})
r17 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r18 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r19 = dup2(r17, r18)
fstat(r19, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r21=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r22=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r20}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r21}}, {@measure='measure'}, {@euid_lt={'euid<', r22}}]}})
r23 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r24 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r25 = dup2(r23, r24)
fstat(r25, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r28=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r26}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r27}}, {@measure='measure'}, {@euid_lt={'euid<', r28}}]}})
r29 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r30 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r31 = dup2(r29, r30)
fstat(r31, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r32=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r33=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r34=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r32}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r33}}, {@measure='measure'}, {@euid_lt={'euid<', r34}}]}})
r35 = getuid()
r36 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r37 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r38 = dup2(r36, r37)
fstat(r38, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r39=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r40=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r41=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000000640)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r39}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@debug={'debug', 0x3d, 0x9}}, {@aname={'aname', 0x3d, '^wlan1bdev'}}, {@cachetag={'cachetag', 0x3d, 'euid<'}}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r40}}, {@measure='measure'}, {@euid_lt={'euid<', r22}}]}})
r42 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r43 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r44 = dup2(r42, r43)
fstat(r44, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r45=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r46=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r47=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r45}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r46}}, {@measure='measure'}, {@euid_lt={'euid<', r47}}]}})
fstat(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r48=>0x0})
r49 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r50 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r51 = dup2(r49, r50)
fstat(r51, &(0x7f0000001340))
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480))
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r52=>0x0})
lstat(&(0x7f0000000280)='./file1\x00', &(0x7f0000000440))
mount$9p_tcp(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x409061, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r34}}, {@measure='measure'}, {@fsname={'fsname'}}]}})
r53 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r54 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r55 = dup2(r53, r54)
fstat(r55, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r56=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r57=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r58=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r56}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r57}}, {@measure='measure'}, {@euid_lt={'euid<', r58}}]}})
r59 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r60 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r61 = dup2(r59, r60)
fstat(r61, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r62=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r63=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r64=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r62}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r63}}, {@measure='measure'}, {@euid_lt={'euid<', r64}}]}})
fsetxattr$system_posix_acl(r10, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x1}, [{0x2, 0x0, r16}, {0x2, 0x3, r22}, {0x2, 0x5, r28}, {0x2, 0x3, r33}, {0x2, 0x2, r35}, {0x2, 0x1, r41}, {0x2, 0x0, r46}, {0x2, 0x5, r48}, {0x2, 0xd, r52}, {0x2, 0x1, r57}], {0x4, 0x2}, [{0x8, 0x1, r62}], {0x10, 0x2}}, 0x7c, 0x1)
r65 = socket(0x200000000000011, 0x4000000000080002, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f00000000c0)=0x80, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r60, 0x8933, &(0x7f0000000380)={'eql\x00', <r66=>0x0})
bind$packet(r65, &(0x7f0000000140)={0x11, 0x0, r66, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14)
sendmmsg(r65, &(0x7f0000000d00), 0x400004e, 0x0)
close(r1)
close(r2)

18:07:04 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x5)
syncfs(0xffffffffffffffff)

18:07:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ed, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1346.232623][   T26] audit: type=1804 audit(1568484424.480:4235): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/bus" dev="sda1" ino=16535 res=1
18:07:04 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x0, 0x0, [], @p_u8=0x0}})

[ 1346.317855][   T26] audit: type=1804 audit(1568484424.490:4236): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/bus" dev="sda1" ino=16535 res=1
18:07:04 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:04 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x6)
syncfs(0xffffffffffffffff)

18:07:04 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ee, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1346.488382][   T26] audit: type=1804 audit(1568484424.510:4237): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/file0" dev="sda1" ino=16548 res=1
18:07:04 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x0, 0x0, [], @p_u8=0x0}})

[ 1346.588430][   T26] audit: type=1804 audit(1568484424.550:4238): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/file0" dev="sda1" ino=16548 res=1
18:07:04 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

[ 1346.759489][   T26] audit: type=1804 audit(1568484424.580:4239): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/file0" dev="sda1" ino=16548 res=1
[ 1346.838634][   T26] audit: type=1804 audit(1568484424.610:4240): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/file0" dev="sda1" ino=16548 res=1
[ 1346.868780][   T26] audit: type=1804 audit(1568484424.640:4241): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/file0" dev="sda1" ino=16548 res=1
[ 1346.968429][   T26] audit: type=1804 audit(1568484424.660:4242): pid=29228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2063/file0" dev="sda1" ino=16548 res=1
18:07:05 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x8914, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:05 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ef, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:05 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x0, 0x0, [], @p_u8=0x0}})

18:07:05 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x7)
syncfs(0xffffffffffffffff)

18:07:05 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:05 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000012c0)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}], 0x4, &(0x7f0000000440)=""/168, 0xa8}, 0x4}, {{&(0x7f0000000500)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/153, 0x99}, {&(0x7f0000000800)=""/138, 0x8a}], 0x5, &(0x7f0000000940)=""/1, 0x1}, 0x1217}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000003800)=""/4096, 0x1000}], 0x1, &(0x7f00000009c0)=""/183, 0xb7}, 0x1}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000b00)=""/45, 0x2d}, {&(0x7f0000000b40)=""/238, 0xee}, {&(0x7f0000000c40)=""/63, 0x3f}, {&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/187, 0xbb}, {&(0x7f0000000e00)=""/202, 0xca}, {&(0x7f0000000f00)=""/116, 0x74}, {&(0x7f0000000f80)=""/128, 0x80}, {&(0x7f0000001000)=""/252, 0xfc}, {&(0x7f0000001100)=""/119, 0x77}], 0xa, &(0x7f0000001240)=""/67, 0x43}, 0x5}], 0x4, 0x3, &(0x7f00000013c0)={0x0, 0x1c9c380})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000540)=r7, 0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001400)={r7, @in6={{0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, [], 0x2a}, 0x8}}, 0x7, 0x6, 0xff, 0xff, 0x2}, &(0x7f00000014c0)=0x98)
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800000, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000000040)={0x1, 0x100000000, 0x2138d75b, 0xe0}, 0x6)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000001800)=""/4096, 0x1000, 0x20, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24)
close(r3)

18:07:05 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:05 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:05 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x3c, 0x6, 0x8000000001}, 0x2c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000000000000000, &(0x7f00000000c0)="b9ff03f0000d698cb89e40f008061fffffff00004000638477fbac141414e9", 0x0, 0x100}, 0x28)

18:07:05 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x8)
syncfs(0xffffffffffffffff)

18:07:05 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2)
fadvise64(r0, 0x0, 0x80000001, 0x1)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000380)={0x9, 0x3, 0x3, 'queue0\x00', 0x5})
r3 = socket$kcm(0xa, 0x6, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r3, &(0x7f0000000080), 0x12)
close(r3)
sendmsg(r4, &(0x7f0000000300)={&(0x7f0000000000)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="38e297a6c3ddf7c5174947cb6fb7c03b19077c06b7ad0f51995c223c5d65262ca2123a2b2b7da45ed425c11ed454689be1ba09cbc946c1a7d6bb546aa462dc8bcc87f9cdc25b84b12341140f094a05c203cee6e378515e395abf44a6f404b53947e06bab3fd2985d99aea859cce7044b8e39a794a80ff8c18798b36cec7e5fcda426ce2cc364b80c33719d95b01e4485891ccb13121eed44bce6ec228a8bef604b5dcc6144e6d7768071f7e8d51f2e69790df02a9866aa6eca80e33e0ed264ec9c", 0xc1}, {&(0x7f00000001c0)="e8583c34eb90a97ba6264d21f5ba94d8b0a3d2469e57daa1da7903eb116b3529af7c62b2e4035993476ba42c9e3ce8de4ff4446c9bd5affdd83cd8aa1c7d3244b28ff1dbec2a1c11659e11142a8b24c4d2d9dbe5d3e84f7e1bc1c52a1ff00b495d02afb9f58f361b5e6a06ab1bc8337f7177794e7aca852e87044ffbabf775e40d92c0570dd62e57b7b6b0c070ec3a73f1d5607f4310a98bfb5515a35d4acb8b80c3a486f90a7b2a0412932fa1952dde483d771d9b40c1a37bd3bf28fcb34bd427127b4863c5110897b69218ac1fdc38ed10c931f03ca6823664396a6c2707c089b48ae43e8ac1116990efbac8df6e817783563419", 0xf5}, {&(0x7f0000001800)="b438cc2e3b615066fc2aef5136a674eb127302cfdbdf16958f54e9d1db5bdd68751448e062cb8772ac7c808a90756290a0bb325a50d6e2fdf3bec73c0ccc031091533c1d9faf776f4ad7d8debd98b5e5f24b06b224ea3b4e59fe9709c72a97a0ca793bb9e305507873ec1bd6260164f47166fc6bae1a0471223de5094b786da69fe52ac3f40bf082b03336f095a4c4dcf16d6502c3512eeba92e4b1453aba1006a6077e9a30793fd50e99b77c88adb1842bb912eabda50823890153ee31c46d88f2b3e3642dcc1595bec9b4c435d5e96f7e46ea1e2067e151be9ba5104b82fb66b73425e9fa5ed9e9471c1ed72054cafcc3c263d39530a8011e8ede4a48230b5161eca379b338bae530fe0f0e3c157b94eb9835b67e3f5f876f5ec77e9e91360697140a6f5a90cdaf947601c4379f08e86ba9ad1fd2ede9a9199c03c717d98ed1b8f1b7eb81d3726e4cb3448ae03b4d92fc0bdb62b90da10d5f546a25fa1d6c3b85638a2bcc4df23a79533839a71a53ec7189b317477dd001c4632ba2e00a33e6e74510dd6e344b3ee84efca0ca40cb4114312c800dce94077f4a0d1c544a29d18c9188280f596e17b9b0a373f70bc079f7b74a275c8cc66d72bcf6f601809f6da08e5b01fb624ae85e7490ace1938a54296d65aff755b33d1d53b1616c88be59a47df199858ea8ca8dc40c8283310e66d1b34b24bda18de74f5f005fe1b904705e2df848704de8b43b66ee7ee1fac35c8a94e6bcdc812d3eccb2d7c30a464d38d0de17f0eb3b71d0bf23e503cfbf2aa16fc8aecc5d2e2f9eac3785159e9fb27f2c02406f805ee684e1b7efec7328e017d0b4ae45d269fafaa3bff4d469b6a6911fceff9177cf7d73ac5467c49d38de837ba261382d35a6f7890670ede77d91b520ff9fdfcfcea8a7c9dd1c32f919143f9a0cfa2e4b8e13872b5c1fb9610b59e074e61b177774c34184fd35d6a7b2a94e91f7c3c6cbc44efdf12a5d161d6118781db3557a7c5404052f302f570c40c7a5dd77393cb232846eb6bf094823bbfd78b6c59cb66eff80b6707c5d0bbdba47c52004aa36bc64394baf3f09473c9347a47e505d7badfd768c70f6db990d934d20296118a5fd787171b58f4510435f73c6006e090478e216ec0871771d98e3b5cb7fbafc4858dc9d306c54442086cb15d1e595b2a92b271776aabb1eb57a598c86319fe5d5a0385ff503c002281f7e8a4204842e518e9d5f3bf8b2be20f9d55b822955756dc0d746dcc263c2f665c33f65a77601cbd8fad54b6d9adaa87cf0560d5ece1f62cda967c233dda4240c77eacd3151f88c01bdfc503a6fe6ffe4be9e55fc4048d41528821295ef232ff413ee2eb22c238014cdfeb8413963f430714d89f1c0ca9cf85c65c8784ae31f614037aefafe44a770fd716cbda36fd398fefd11b9d3559a75030700007d98b145d79bd466b82cb9901a7bf2fc52a2f0430d1d3f5bc877a9f8745af94967fced19ad00fdbe846304184860dff6562c26b3cdb3ad23761df06a3c2f343fb9e2e396474d5a39715471c701971af478e6c7618531f78530ba604aa91e66d5bb0af06e7ec9daa439e8562388fc9b5bf23ef412e2cb04e6eb30fae2abcc1beed075b877470e2c60314660a932a80600a76792b58074af2e56426eea08897182f2a079383f6f821f9f3dafb1a43e598a13ca175cfc9fcb71dfa7daf5fcb8a0003f4440b69b4fbe14ebe1c093829c2e76fdb3c058c2a769c1135440b5bbb577ceb2174b61d2267e8981a08a6ba0f43fa5848ddc28757fd1bbf52c802594849cb8cd5cc0def2ef7207d4eadd1f48449c0d36543063ef162ddc2a8ee87ddf087d1d4978c0515b752ae2b142e40e0c797a2968bf092de142de64e7c115469ca7179effae5fe2a1466a62b02c7cfffaf29fa08cb590adee1c7d5ee3a800d5f04d4649fdb0136aa929b047e2bc686dc1358f5da1440893bbaef33bbcefe5de950aa22aa112725386a8db72ffffb9ed0987d49d65ee1eac2d028de76c89af3d3673146a44c7fe6ddb526a34d0ff6d96018f343c91b81ac2c4b5a121f574dde811a932198c3bd995d74ea44fa03126684528a162ce604e26022d69039a59a297ea6f5e9249f4199398385edfd2df3d4b8af72302a96a943bc7ef753c98f46e33d373280d49b89a540342a133b4712e4e21e4bf0cafbd417f7d58dbc240a8fff5915ada8b20564854521dc849ffaa93b67c8759a6813da931aee576ebad5e4b4063d4f1c50c88204965904ddca98f4212b7f964cafed3475edfc3003dc85aa17006faf30d394e0b6839c273258b9d382b51e33998ecfe031077d88578cf8cb4ecb8ba7ee75a8e6db594a95d879ec0f82e3f74f10856d7c6400723cc4180f069f60c3dc79e70597455f9874bff3bde40a0c441678d411c3973afc2e7aaff414a06a46854ff379216999c9f69eb0a5b9866d4bd053458705ebc60ec358f80ab13d234511771e876e785343e9daa59faf2e53ff06ff609eca99a084756a52231c945c50c7a25b31292c3ab5a0f147a48b612622cfd4bc7510586f3dec480db9f772af6d1f4fe50f063eccf2b7db7a4114c8281cfd1c83ee0bf1afbbbeeebae40605f6be4561bcdccaf7b681d6f089c37b9ec34937a7642e8a0a5c9374c42f939b4d69754b22217bfb24a3e51cad5289579e9c492f8395179a1fa8e679eada4740b0733df008301bd5f5e95a2cb36cbb38ab16632e3e7a653bc4ef8730e4558b40784d55703f0b6b6ba778671968c6e0de054e8abde445400f7626266e63fa74cb440fe1a8b654d6476d2ad601aca6767af0b4c23c606334025d2489fcb16cae03a3d6186d7a646dad3d5553c5f258f4a881d6a08fe7d5ff7230497b225fa23f9283958445aa4cdf85a74fc728c37a48fd7cac509391bdddde557795c7bf4895820d7bba446798790e6ecd5981e74b201f7bc539834b35e9f16760a382f081146a926e1e0621bbc487447434a9bb1baeb8bfb468ef6ff765208676aed5a07fcfa6b8d5f6ca0b43edd4cb3f87a6af0c42777e6cb565151df693f2f931a241b8e288b1b449f2e288fa9de040846a18e48482a779e8d7581b0baeefe440c9e789506f3fe965807f06fc6ad11df465fb7c49ac6bf7e3a1202c3fe059a4a86bf5ed70f8df75feba917925f793124e59c61ccdf78063437a378534084febb32e8ea571c4467c5bb1b1084a0f5ca7b962769d7c31e69a2528f2e7e1d1adb09117de025e930944b21976ec6d44d1c9bd3b161c874a9fc8abfd1abb0f77bfa37e42d8b88ee967c3329f870adf47771f6e347765021cef584b0d89ef9d65d47c90b27af1fd5d43c1d7b1a1d3a36145aa497e288f3142be92741e66bf865e28c9ea9efbdf3742150f7c0b4ba121915b3c169f1c450b31cddba5ca8681534644082bcfb36803b527eb8b044a2424345fe5b00d1c83ccaab1cdb16675d194eb4c9cff7324fdeb897866bf499335e6036571bb3152aa04ef3388200ce5ae9007c66592b9948e189716e04205c39b2863843ec056bd7e450f9428a58250a913459f798b38340e5d7e6abe534bab525a2af1a917679a49dd1ddba9aa992b17440fffe4d79db802def57e3b0b65335e52894a14cafadebee064e29302975eb7fce36bf83820358ae7cb5a80716151f1037da295a52be84e337e9d2aff9203bc0c3c6b011c1fa02668a5f207c5c672f79ddbba2841830b6e997e34e450be86a046d4aac1cda8216821b4d843d71f6b46442daef0f1ad1944dcb4ef65a30dc8287f7609f103d6e8b2c718ac871f0c620090c1139d8a121bd4887f7a616ed73a33168b950368a08e31ed5f18cfd3d2223a59d8608145ba8ed3b5aa3ee1562e41f9566d7913465bb12251bdc529532c50d2825c464d0b42c5d6069703cc465823b92f1b5cb5e0020ea007f6c3de1a880a4b46f48624e3a41db89005f85296ac67b6014a0e3272fef0eab91c06402929a02881152df449d31a02ae4aec61dd2c91733eab2df37fc0e74fb6bfd9e14d941084ae8ff5ba51ff3d0382682e9dfaa9e685f9526856c333d0591379faf9dbb19a4dcb69e3246492bd1d574f401830b8ad53c94a8b4c401f856a02a2c3e6fec6abf3e5179e68fde3c5a8b3c07d8340f2db7abd04d12c32c966a72d447721052a17a770f79577257b3beaceb670f894a9fcff65643ea35004031831cc4051120faadd955c36de81902fbf74acf28ded3a92a89882a14a1f4199c615cababaeca2cf628ab1a98fb263a1bc531e986af4d9ada319c764711cbfabc98c2e828fd0907c47ee8f000dc2fd85db4ab8c3744490599e379390859708a10842086cb79c2ae24dba67bbc963c5a9f5daeca5274d0ed7302f477bbfaedd613399c52a2f67a0c7bad6c3eaee493d3e2c5e4be87f639e3e24ca4d0981f2850d9a81ec2682e9a6fb41afeafc7fbd5e7dad77ee23a59306c8df5dcb4dbbc21c959c12d68a4c7e6316ffdc135f56461ede66cee436c67e5c7ea8d65110d689326dac730d41eee591e3def8609a77571b189926cb6e76b308e624e3dbf8b197c6a2a38fc1be36be06a099da208d7f265b739d9666b0901098b0f1b23f1d0387a2f851744cefc9ac5880d7d6467393f83985767a04305dc7b5cb4ed893a2ac669a1568d400a5b87756d93d652c65ee8437943448068ff1660bc493d3839269ad512f733b6387974766cab3779714d53f25dc56b380eac3e6dd2338ba337a022515e7fab29f16f8539de15a8c7595870173b468ca9d9171878a59f7d53379cbf157dd4623212903076de985185072ed250f3e9da07a3fbc2e505dfd8bbd1d6e7eae4936ca7d2f4dcf332f4af58ac0968edd1e44e6ff3867780fd655ab0a06df162e6e9426a8c5845a8ee12c38cc0b61d5c636f015a2ab3c97cc17dc3160b65daa27752c1220c549274e56b28dc7005c4455e3faf2cfdaeeef6b5a69e4666ccd9facc675405a4cae57bc8c950850a71ae64c4bac12f1d02fbc87d33edca773a55d5ee0b3baf1263587df5c3b456e0bc828a184e41e45f83a6174563fa2a3d0b5f3884fc5008958a10011e959ef096213f9dd10a41f2df175d1da0f633519e23416d9ebf1216e3ad765b53fadea64c32d65c6d13b194b090ad20040fb21f1e7b247ad3d40964c2c620104d24886d5403cc8763328fee7956e93600c2118a8d509f5c71880a60c31dbe7109e17644786813427a3232370a47c5ca6635e9170496e74f010b709112e9f0840caad1895f84f1c555bcce00e27282299b2ab7a414dfde7e361b8dc3c2494e2930dc7c72de074bc28d5ec1b36c65850f02db37dda82c278d9f1f5d07d1c5851056b377d43bdb3ec7d1294597620ca0bd56463e71827314d54f9beb954dfb5c19f66cb9f761ecbc175f8067f2868d93d6e033f163e20a28eca4514a5dd7bb641020d315f2f23f7116726e62cb019693ab1029b990d0de9b6f22f85f00ef79dce52b1e5aaa8adda6d9c5065f651cc028c300418418d1129c87b2ea63bbe038061ac3ea62786e06ceadbe18547253d936dc698a5cc193fed8df8ea6e8c867eddd45e1384b82c7e152fd21ecc0191cf17b90a49594bdf49ac961b2256c33968f8193e01f0d427f74be22858da559b82b62962379fe09261e9a7fa9b7eee0a122e960c1ecbfbec2e730d258001321bf953e440909984e59c5e23055fa0694a83958b7f3a223d3e7011a0971dd7f408e59468285b17418323d3e25a12383d1ffa7b59ec029d2ff27afdf783440f6164907781d87c972c55d4c9f236a10b2744728f2794209106179b65f871", 0x1000}], 0x3}, 0x4004800)
close(r5)

18:07:05 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x9)
syncfs(0xffffffffffffffff)

18:07:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:06 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000000c0)={0x2f, "3f3b3c6835cdf9b833bd0f0caf7268573ba1cc433af95a3923e2bbd93ef81f69ee2782fd84bbfbaabe7520ce2960da239a658478a68fa32d3673d1f5243a26a6270e64f6e0638357f5e00b66d086c62982100ec6e03befddcc9387ace501b04f27e923a7eed432d574ad3ad340293d27f34764471d140b987cde7df062e0583c"})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12)
close(r1)
close(r2)

18:07:06 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x8933, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:06 executing program 5:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
dup2(r0, r1)

18:07:06 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xa)
syncfs(0xffffffffffffffff)

18:07:06 executing program 5:

18:07:06 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
r5 = accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
bind$ax25(r6, &(0x7f00000001c0)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @default, @default]}, 0x48)
close(r1)
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000140)={0x0, 0x1f, 0x4, &(0x7f0000000100)=0x7202})
socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0xffffffffffffff70)
close(r2)

18:07:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:06 executing program 3:
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:06 executing program 5:

18:07:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xb)
syncfs(0xffffffffffffffff)

18:07:06 executing program 3:
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xae01, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:06 executing program 5:

18:07:06 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x620001)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x382ca2065354cd0c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a8, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0xffffffffffffff0b, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70d9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0xffffffffffffffbc, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb46b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x380000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}]}]}]}, 0x1a8}}, 0x80)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
close(r1)
close(r2)

18:07:06 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xc)
syncfs(0xffffffffffffffff)

18:07:06 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:06 executing program 3:
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:07 executing program 5:
r0 = memfd_create(&(0x7f0000000040)='#\'%nodev\x00', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000200), 0x87)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0)

18:07:07 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xd)
syncfs(0xffffffffffffffff)

18:07:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:07 executing program 5:
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r0)
keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, 0x0)

18:07:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xae03, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:07 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xe)
syncfs(0xffffffffffffffff)

18:07:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syncfs(r3)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r4)
ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000140)={0xcb8053204e1704ef, {0x100000001, 0x5, 0x0, 0x76}, {0xfff, 0x1, 0x100, 0xfff}, {0x0, 0x6}})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)={<r5=>0x0, 0x3ec4}, &(0x7f0000000040)=0x8)
syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x2a77c33f9e30fa2b)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x2}, &(0x7f0000000100)=0x8)
close(r1)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340))
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e22, @multicast1}}}, 0x84)
close(r2)

18:07:07 executing program 5:
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r0)
keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, 0x0)

18:07:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xf)
syncfs(0xffffffffffffffff)

18:07:07 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:07 executing program 5:
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r0)
keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, 0x0)

18:07:07 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:07 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
prctl$PR_GET_SECCOMP(0x15)
close(r2)

18:07:07 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x10)
syncfs(0xffffffffffffffff)

18:07:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0xae41, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:08 executing program 3:
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:08 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="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", 0x151, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}})

18:07:08 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x11)
syncfs(0xffffffffffffffff)

18:07:08 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
io_setup(0xffff, &(0x7f0000000480))
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56})
r3 = socket$kcm(0xa, 0x6, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r3, &(0x7f0000000080), 0x12)
close(r3)
execve(&(0x7f0000000100)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000140)='\'(vmnet1GPL\x00', &(0x7f0000000180)='*@/vmnet0eth0&eth1md5sum\x8dem0selinux^:@\x00', &(0x7f0000000200)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x1b\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='\'wlan1eth1\\system#\x00'])
close(r4)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x88011)
r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r5)
getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000004c0), &(0x7f0000000500)=0x4)

18:07:08 executing program 3:
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x12)
syncfs(0xffffffffffffffff)

18:07:08 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8f9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:08 executing program 5:

18:07:08 executing program 3:
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:08 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x13)
syncfs(0xffffffffffffffff)

18:07:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x400454ca, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:09 executing program 5:

18:07:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8fa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x14)
syncfs(0xffffffffffffffff)

18:07:09 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:09 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000280)={{0x2, 0x4e23, @rand_addr=0x7e8b00000}, {0x306}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_hsr\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r5, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xa353}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x480)
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xa4, @local, 0xfffffffffffff3e2}, 0x1c)
close(r2)

18:07:09 executing program 5:

18:07:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8fb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x15)
syncfs(0xffffffffffffffff)

18:07:09 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:09 executing program 5:

18:07:09 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x400454d4, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:09 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8fc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:09 executing program 5:

18:07:09 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x16)
syncfs(0xffffffffffffffff)

18:07:09 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80, 0x40)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r3, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000003c0))
r4 = getpid()
fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r4})
ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000380)={@remote, <r5=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r3, &(0x7f0000000500)="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", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r5, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r8 = dup2(r6, r7)
fstat(r8, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r10}}, {@measure='measure'}, {@euid_lt={'euid<', r11}}]}})
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@loopback, 0x4e23, 0x1, 0x4e24, 0xff, 0x2, 0x20, 0x0, 0x2e, r5, r10}, {0x767d367, 0x4, 0x5, 0x9, 0x3, 0x3, 0x3a56, 0x9}, {0xffffffffffff8001, 0x2d2e, 0x6, 0x1f}, 0x92ca, 0x6e6bb4, 0x3, 0x0, 0x55a83d940bd32abd, 0x2}, {{@in6=@rand_addr="f8b41cb56f38b3afc682741404e92afb", 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3506, 0x0, 0x0, 0xfffffffffffffff8, 0x6, 0x400, 0x3}}, 0xe8)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r12 = socket$kcm(0xa, 0x6, 0x0)
close(r12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
recvmsg$kcm(r12, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
close(r12)
close(r13)

18:07:09 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:10 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x17)
syncfs(0xffffffffffffffff)

[ 1351.755397][   T26] kauditd_printk_skb: 25 callbacks suppressed
[ 1351.755411][   T26] audit: type=1804 audit(1568484430.000:4268): pid=29517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2074/file0" dev="sda1" ino=16674 res=1
18:07:10 executing program 5:

18:07:10 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:10 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8fd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1351.886119][   T26] audit: type=1804 audit(1568484430.130:4269): pid=29534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2074/file0" dev="sda1" ino=16674 res=1
18:07:10 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xfad22d4132b19cd6, 0x0)
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x2c)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:10 executing program 5:

18:07:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x40049409, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:10 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:10 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x18)
syncfs(0xffffffffffffffff)

18:07:10 executing program 5:

18:07:10 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8fe, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:10 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x8, {0x7, 0x1f, 0x2c624a91, 0x1000, 0x0, 0x6, 0x1f, 0x3}}, 0x50)
close(r3)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r5, 0x0)
read$alg(r5, &(0x7f0000000200), 0x0)
r6 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r4, r6)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x400, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000540)=r9, 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000280)={0x400, 0x1000, 0x8, 0x4, 0x9, 0x4, 0x6, 0x100000000, r9}, &(0x7f00000002c0)=0x20)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r12=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000540)=r12, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r12, 0x2}, 0x8)
r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x301000, 0x0)
ioctl$SG_NEXT_CMD_LEN(r13, 0x2283, &(0x7f0000000040)=0xf2)
bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e)

18:07:11 executing program 5:

18:07:11 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

[ 1352.838511][   T26] audit: type=1804 audit(1568484431.080:4270): pid=29558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2076/file0" dev="sda1" ino=16899 res=1
18:07:11 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x1b)
syncfs(0xffffffffffffffff)

18:07:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x8ff, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1353.000226][   T26] audit: type=1804 audit(1568484431.120:4271): pid=29563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2076/file0" dev="sda1" ino=16899 res=1
18:07:11 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000004980)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000002800)=""/4096, 0x1000}, 0x401}, {{&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/17, 0x11}], 0x2, &(0x7f00000004c0)=""/243, 0xf3}, 0x1}, {{&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000780)}], 0x7, &(0x7f0000000ac0)=""/94, 0x5e}, 0x7}, {{&(0x7f0000000b40), 0x80, &(0x7f0000000e80)=[{&(0x7f0000000bc0)=""/242, 0xf2}, {&(0x7f0000000cc0)=""/240, 0xf0}, {&(0x7f0000000dc0)=""/169, 0xa9}], 0x3, &(0x7f0000000ec0)=""/224, 0xe0}, 0x4000}, {{&(0x7f0000000fc0)=@nl, 0x80, &(0x7f0000001400)=[{&(0x7f0000001040)=""/148, 0x94}, {&(0x7f0000001100)=""/198, 0xc6}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000001300)=""/195, 0xc3}], 0x4, &(0x7f0000001440)=""/209, 0xd1}, 0x6}, {{&(0x7f0000001540)=@generic, 0x80, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/185, 0xb9}, {&(0x7f0000001680)=""/104, 0x68}, {&(0x7f0000001700)=""/73, 0x49}, {&(0x7f0000004800)=""/217, 0xd9}], 0x4, &(0x7f0000004900)=""/77, 0x4d}, 0x2}], 0x6, 0x40002040, &(0x7f0000004b00))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x6, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r3)

18:07:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x40087703, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:11 executing program 5:

18:07:11 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:11 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x1c)
syncfs(0xffffffffffffffff)

18:07:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x900, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:11 executing program 5:

18:07:11 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000000))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r3, 0x0)
recvmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0xffffffffffffff3c, 0x0, 0x499}, 0xc1)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:11 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:11 executing program 5:

18:07:11 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x901, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:11 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x1d)
syncfs(0xffffffffffffffff)

18:07:12 executing program 5:

18:07:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:12 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:12 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x2007, 0x52, 0xf, 0x7, 0x12f9, 0x2})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
r4 = creat(&(0x7f0000000200)='./bus\x00', 0xc0)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x6031, r4, 0x0)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x4)
close(r1)
close(r2)

18:07:12 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x902, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:12 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x1e)
syncfs(0xffffffffffffffff)

18:07:12 executing program 5:

18:07:12 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x21)
syncfs(0xffffffffffffffff)

18:07:12 executing program 5:

18:07:12 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:12 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x903, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:12 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x49800, 0x0)
close(r1)
pipe2(&(0x7f0000000040), 0xe800)
close(r2)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r3)
getpeername(r3, &(0x7f0000000100)=@generic, &(0x7f0000000000)=0x80)

18:07:12 executing program 5:

18:07:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4008ae6a, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:13 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x22)
syncfs(0xffffffffffffffff)

18:07:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x904, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:13 executing program 4:
socket$kcm(0x2b, 0x1, 0x0)
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:13 executing program 5:

18:07:13 executing program 5:

18:07:13 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x905, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x23)
syncfs(0xffffffffffffffff)

18:07:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x4, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:13 executing program 5:

18:07:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010744d, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:13 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x906, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x24)
syncfs(0xffffffffffffffff)

18:07:13 executing program 5:

18:07:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5bd6db82, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x19}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x2040004}, 0x24)
r2 = socket$kcm(0xa, 0x6, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r2, &(0x7f0000000080), 0x12)
close(r2)
close(r3)

18:07:13 executing program 5:

18:07:13 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x907, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:13 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x25)
syncfs(0xffffffffffffffff)

18:07:13 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:13 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040))
close(r2)

18:07:13 executing program 5:

18:07:14 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:14 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x908, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:14 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x26)
syncfs(0xffffffffffffffff)

18:07:14 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000d43000))

18:07:14 executing program 5:

18:07:14 executing program 4:
r0 = socket$kcm(0x2b, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176)
mkdirat$cgroup(r6, &(0x7f0000000000)='syz\xff\xda', 0x1ff)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000003c0))
r7 = getpid()
fcntl$lock(r5, 0x7, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffffffffffe, 0x3ff, r7})
ioctl$RTC_SET_TIME(r6, 0x4024700a, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000380)={@remote, <r8=>0x0}, &(0x7f0000000600)=0x14)
sendto$packet(r6, &(0x7f0000000500)="4b085b2933a302781fbfc2b643da1df7eccc81350d5a7c588872130fce9650507f617d690da63ba4721826266a976f1556d4bdef04229705160946dc8f40e247a396e619168f625d90b74598218ab57e9e3160879a87fcdd39d0c80f2b922d356c7f3491d4e6c3913a114a5e08818a67f5a80f97a0cf82eab7304d4789f8e45adea072f3d05d1af3d50e7c7ee79d690a80ed42a6d56ad0622056c204ba892b73ce6b4dce6c049c622d63b31bb61b97bf648d718683049863dcc78e96bb1a3ae681e1aa8d2a1c6d3a7e01af7aae009c8be1237bb96090e5ff25523d85eff6fad3cd4d4cff864eb7d32960dd76f301076851a3e7a6752f48e2d4706dd3807674", 0xff, 0x55, &(0x7f0000000640)={0x11, 0xf8, r8, 0x1, 0x7fff, 0x6, @broadcast}, 0x14)
connect(r4, &(0x7f00000000c0)=@ll={0x11, 0x39, r8, 0x1, 0x8b1}, 0x80)

18:07:14 executing program 5:

18:07:14 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x27)
syncfs(0xffffffffffffffff)

18:07:14 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000d43000))

18:07:14 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x909, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:14 executing program 5:

18:07:14 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f00000013c0)='./file1\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x409061, &(0x7f0000001580)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, '/dev/dmmidi#\x00'}}, {@access_user='access=user'}, {@cache_loose='cache=loose'}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r8}}, {@measure='measure'}, {@euid_lt={'euid<', r9}}]}})
mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,rootcontext=user_u,fowner<', @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=r8, @ANYBLOB='\x00\x00'])
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r10 = socket$kcm(0xa, 0x6, 0x0)
close(r10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg$kcm(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r10, &(0x7f0000000080), 0x12)
close(r10)
close(r11)

[ 1356.514756][   T26] audit: type=1804 audit(1568484434.760:4272): pid=29772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2086/file0" dev="sda1" ino=16564 res=1
[ 1356.551081][T29772] 9pnet: p9_fd_create_tcp (29772): problem connecting socket to 127.0.0.1
[ 1356.576158][   T26] audit: type=1804 audit(1568484434.780:4273): pid=29772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2086/file0" dev="sda1" ino=16564 res=1
[ 1356.640779][   T26] audit: type=1804 audit(1568484434.890:4274): pid=29772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2086/file0" dev="sda1" ino=16564 res=1
[ 1356.667982][   T26] audit: type=1804 audit(1568484434.910:4275): pid=29776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2086/file0" dev="sda1" ino=16564 res=1
[ 1356.697598][T29776] 9pnet: p9_fd_create_tcp (29776): problem connecting socket to 127.0.0.1
[ 1356.707693][   T26] audit: type=1804 audit(1568484434.910:4276): pid=29776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2086/file0" dev="sda1" ino=16564 res=1
[ 1356.749000][   T26] audit: type=1804 audit(1568484434.910:4277): pid=29777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2086/file0" dev="sda1" ino=16564 res=1
18:07:15 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x28)
syncfs(0xffffffffffffffff)

18:07:15 executing program 5:

18:07:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x90a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:15 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, 0x0, &(0x7f0000d43000))

18:07:15 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:15 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r2)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x8000000000000, &(0x7f0000000040)=0x4)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r3)

18:07:15 executing program 5:

18:07:15 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:07:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x90b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:15 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x29)
syncfs(0xffffffffffffffff)

18:07:15 executing program 4:
r0 = socket$kcm(0x2b, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:15 executing program 5:

18:07:15 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:07:15 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x48)
syncfs(0xffffffffffffffff)

18:07:15 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x90c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:15 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0xd5}, 0x40010123)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
close(r2)

18:07:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010ae68, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:16 executing program 5:

18:07:16 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:07:16 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x6, 0x0)
socket$isdn(0x22, 0x3, 0x3b148143210e1cb2)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_int(r1, &(0x7f0000000080), 0x12)
close(r1)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r3, r4)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000))
close(r2)

18:07:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x90d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x49)
syncfs(0xffffffffffffffff)

18:07:16 executing program 5:

18:07:16 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

18:07:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x90e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1357.861096][   T26] audit: type=1804 audit(1568484436.110:4278): pid=29844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2090/file0" dev="sda1" ino=16521 res=1
18:07:16 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
write(r1, 0x0, 0x0)

18:07:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x60)
syncfs(0xffffffffffffffff)

[ 1357.961995][   T26] audit: type=1804 audit(1568484436.170:4279): pid=29848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir498454365/syzkaller.krbbxE/2090/file0" dev="sda1" ino=16521 res=1
18:07:16 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x1c)

18:07:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x401c5504, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:16 executing program 3:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe172, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180))

18:07:16 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)

18:07:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xf0)
syncfs(0xffffffffffffffff)

18:07:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x90f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:16 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x300)
syncfs(0xffffffffffffffff)

18:07:16 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x910, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:16 executing program 3 (fault-call:6 fault-nth:0):
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:17 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x500)
syncfs(0xffffffffffffffff)

18:07:17 executing program 4 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

[ 1358.834871][T29902] FAULT_INJECTION: forcing a failure.
[ 1358.834871][T29902] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1358.867816][T29902] CPU: 0 PID: 29902 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1358.877079][T29902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1358.887153][T29902] Call Trace:
[ 1358.890473][T29902]  dump_stack+0x172/0x1f0
[ 1358.894826][T29902]  should_fail.cold+0xa/0x15
[ 1358.899430][T29902]  ? fault_create_debugfs_attr+0x180/0x180
[ 1358.905248][T29902]  ? up_write+0x155/0x490
[ 1358.909620][T29902]  should_fail_alloc_page+0x50/0x60
[ 1358.914937][T29902]  __alloc_pages_nodemask+0x1a1/0x900
[ 1358.920339][T29902]  ? __alloc_pages_slowpath+0x2540/0x2540
[ 1358.926234][T29902]  ? mark_lock+0xc2/0x1220
[ 1358.930741][T29902]  ? __kasan_check_read+0x11/0x20
[ 1358.930765][T29902]  ? is_bpf_text_address+0xac/0x170
[ 1358.941064][T29902]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 1358.941078][T29902]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 1358.941096][T29902]  alloc_pages_vma+0x1bc/0x3f0
[ 1358.941114][T29902]  do_huge_pmd_anonymous_page+0x55a/0x1b00
[ 1358.941127][T29902]  ? __kasan_check_read+0x11/0x20
[ 1358.941141][T29902]  ? mark_lock+0xc2/0x1220
[ 1358.941157][T29902]  ? prep_transhuge_page+0xd0/0xd0
[ 1358.941171][T29902]  ? __pmd+0x60/0x60
[ 1358.941192][T29902]  __handle_mm_fault+0x2d35/0x3f20
[ 1358.941215][T29902]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[ 1358.994076][T29902]  ? __kasan_check_read+0x11/0x20
[ 1358.999214][T29902]  handle_mm_fault+0x1b5/0x6c0
[ 1359.004000][T29902]  __do_page_fault+0x536/0xdd0
[ 1359.008792][T29902]  do_page_fault+0x38/0x590
[ 1359.013315][T29902]  page_fault+0x39/0x40
[ 1359.017653][T29902] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[ 1359.024007][T29902] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[ 1359.043642][T29902] RSP: 0018:ffff88805de27d18 EFLAGS: 00010202
[ 1359.049732][T29902] RAX: 0000000000000001 RBX: 0000000000000010 RCX: 0000000000000002
[ 1359.057976][T29902] RDX: 0000000000000000 RSI: ffff88805de27d88 RDI: 0000000020d43000
[ 1359.065963][T29902] RBP: ffff88805de27d50 R08: 0000000000000000 R09: ffffed100bbc4fb3
[ 1359.073940][T29902] R10: ffffed100bbc4fb2 R11: ffff88805de27d97 R12: 0000000020d43000
18:07:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

[ 1359.081923][T29902] R13: ffff88805de27d88 R14: 0000000020d43010 R15: 00007ffffffff000
[ 1359.090214][T29902]  ? _copy_to_user+0x146/0x160
[ 1359.094994][T29902]  put_itimerspec64+0xc4/0x1f0
[ 1359.101082][T29902]  ? put_timespec64+0x140/0x140
[ 1359.105981][T29902]  __x64_sys_timer_settime+0x265/0x310
[ 1359.111558][T29902]  ? __ia32_sys_timer_getoverrun+0x130/0x130
[ 1359.117644][T29902]  ? trace_hardirqs_on_thunk+0x1a/0x20
[ 1359.123258][T29902]  ? do_syscall_64+0x26/0x760
[ 1359.127927][T29902]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 1359.133218][T29902]  do_syscall_64+0xfa/0x760
[ 1359.137898][T29902]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1359.143994][T29902] RIP: 0033:0x4598e9
[ 1359.147872][T29902] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1359.168170][T29902] RSP: 002b:00007ff3c7ac2c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000df
[ 1359.176588][T29902] RAX: ffffffffffffffda RBX: 00007ff3c7ac2c90 RCX: 00000000004598e9
[ 1359.184687][T29902] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1359.193793][T29902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1359.201950][T29902] R10: 0000000020d43000 R11: 0000000000000246 R12: 00007ff3c7ac36d4
[ 1359.209930][T29902] R13: 00000000004c9036 R14: 00000000004e0188 R15: 0000000000000005
[ 1359.352322][T29912] FAULT_INJECTION: forcing a failure.
[ 1359.352322][T29912] name failslab, interval 1, probability 0, space 0, times 0
[ 1359.418437][T29912] CPU: 0 PID: 29912 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1359.427603][T29912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1359.437678][T29912] Call Trace:
[ 1359.440989][T29912]  dump_stack+0x172/0x1f0
[ 1359.445349][T29912]  should_fail.cold+0xa/0x15
[ 1359.449963][T29912]  ? fault_create_debugfs_attr+0x180/0x180
[ 1359.455824][T29912]  ? ___might_sleep+0x163/0x280
[ 1359.460698][T29912]  __should_failslab+0x121/0x190
[ 1359.465653][T29912]  should_failslab+0x9/0x14
[ 1359.470162][T29912]  __kmalloc+0x2e0/0x770
[ 1359.474523][T29912]  ? mark_held_locks+0xf0/0xf0
[ 1359.479312][T29912]  ? mark_lock+0xc2/0x1220
[ 1359.483845][T29912]  ? _parse_integer+0x190/0x190
[ 1359.488711][T29912]  ? tomoyo_realpath_from_path+0xcd/0x7b0
[ 1359.494457][T29912]  tomoyo_realpath_from_path+0xcd/0x7b0
[ 1359.500018][T29912]  ? tomoyo_path_number_perm+0x193/0x520
[ 1359.505753][T29912]  tomoyo_path_number_perm+0x1dd/0x520
[ 1359.511230][T29912]  ? tomoyo_path_number_perm+0x193/0x520
[ 1359.516892][T29912]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1359.522724][T29912]  ? __f_unlock_pos+0x19/0x20
[ 1359.527463][T29912]  ? __fget+0x384/0x560
[ 1359.531720][T29912]  ? ksys_dup3+0x3e0/0x3e0
[ 1359.531737][T29912]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1359.531751][T29912]  ? fput_many+0x12c/0x1a0
[ 1359.531771][T29912]  tomoyo_file_ioctl+0x23/0x30
[ 1359.531787][T29912]  security_file_ioctl+0x77/0xc0
[ 1359.531802][T29912]  ksys_ioctl+0x57/0xd0
[ 1359.531819][T29912]  __x64_sys_ioctl+0x73/0xb0
[ 1359.556551][T29912]  do_syscall_64+0xfa/0x760
[ 1359.556575][T29912]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1359.575669][T29912] RIP: 0033:0x4598e9
[ 1359.579577][T29912] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1359.599277][T29912] RSP: 002b:00007f5681082c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1359.607720][T29912] RAX: ffffffffffffffda RBX: 00007f5681082c90 RCX: 00000000004598e9
18:07:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4020940d, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:17 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x911, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:17 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:17 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x600)
syncfs(0xffffffffffffffff)

[ 1359.615703][T29912] RDX: 0000000020000040 RSI: 00000000c0205648 RDI: 0000000000000003
[ 1359.623686][T29912] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1359.631666][T29912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56810836d4
[ 1359.639773][T29912] R13: 00000000004c5057 R14: 00000000004d9558 R15: 0000000000000004
[ 1359.650791][T29912] ERROR: Out of memory at tomoyo_realpath_from_path.
18:07:18 executing program 4 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:18 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x700)
syncfs(0xffffffffffffffff)

18:07:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x912, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1359.880450][T29934] FAULT_INJECTION: forcing a failure.
[ 1359.880450][T29934] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1359.894743][T29934] CPU: 1 PID: 29934 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1359.903866][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1359.913941][T29934] Call Trace:
[ 1359.917256][T29934]  dump_stack+0x172/0x1f0
[ 1359.921620][T29934]  should_fail.cold+0xa/0x15
[ 1359.926243][T29934]  ? fault_create_debugfs_attr+0x180/0x180
[ 1359.932080][T29934]  ? lock_downgrade+0x920/0x920
[ 1359.936978][T29934]  should_fail_alloc_page+0x50/0x60
[ 1359.943422][T29934]  __alloc_pages_nodemask+0x1a1/0x900
[ 1359.948824][T29934]  ? __kasan_check_read+0x11/0x20
[ 1359.953870][T29934]  ? mark_lock+0xc2/0x1220
[ 1359.958305][T29934]  ? __alloc_pages_slowpath+0x2540/0x2540
[ 1359.964028][T29934]  ? __kasan_check_read+0x11/0x20
[ 1359.969214][T29934]  ? fault_create_debugfs_attr+0x180/0x180
[ 1359.975139][T29934]  cache_grow_begin+0x90/0xd20
[ 1359.979927][T29934]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1359.986193][T29934]  __kmalloc+0x6b2/0x770
[ 1359.990457][T29934]  ? mark_held_locks+0xf0/0xf0
[ 1359.995240][T29934]  ? mark_lock+0xc2/0x1220
[ 1359.999676][T29934]  ? tomoyo_realpath_from_path+0xcd/0x7b0
[ 1360.005408][T29934]  tomoyo_realpath_from_path+0xcd/0x7b0
[ 1360.010989][T29934]  ? tomoyo_path_number_perm+0x193/0x520
[ 1360.016830][T29934]  tomoyo_path_number_perm+0x1dd/0x520
[ 1360.022332][T29934]  ? tomoyo_path_number_perm+0x193/0x520
[ 1360.027988][T29934]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1360.033835][T29934]  ? __f_unlock_pos+0x19/0x20
[ 1360.038577][T29934]  ? __fget+0x384/0x560
[ 1360.042752][T29934]  ? ksys_dup3+0x3e0/0x3e0
[ 1360.047190][T29934]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1360.053469][T29934]  ? fput_many+0x12c/0x1a0
[ 1360.053493][T29934]  tomoyo_file_ioctl+0x23/0x30
[ 1360.053512][T29934]  security_file_ioctl+0x77/0xc0
[ 1360.053533][T29934]  ksys_ioctl+0x57/0xd0
[ 1360.062725][T29934]  __x64_sys_ioctl+0x73/0xb0
[ 1360.062742][T29934]  do_syscall_64+0xfa/0x760
[ 1360.062764][T29934]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1360.062775][T29934] RIP: 0033:0x4598e9
[ 1360.062791][T29934] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1360.062799][T29934] RSP: 002b:00007f5681082c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1360.062817][T29934] RAX: ffffffffffffffda RBX: 00007f5681082c90 RCX: 00000000004598e9
18:07:18 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x2000, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:18 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x900)
syncfs(0xffffffffffffffff)

[ 1360.126726][T29934] RDX: 0000000020000040 RSI: 00000000c0205648 RDI: 0000000000000003
[ 1360.134699][T29934] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1360.142657][T29934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56810836d4
[ 1360.150635][T29934] R13: 00000000004c5057 R14: 00000000004d9558 R15: 0000000000000004
18:07:18 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x913, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:18 executing program 4 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:18 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

[ 1360.471152][T29953] FAULT_INJECTION: forcing a failure.
[ 1360.471152][T29953] name failslab, interval 1, probability 0, space 0, times 0
[ 1360.538457][T29953] CPU: 0 PID: 29953 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1360.547615][T29953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1360.557695][T29953] Call Trace:
[ 1360.561011][T29953]  dump_stack+0x172/0x1f0
[ 1360.565365][T29953]  should_fail.cold+0xa/0x15
[ 1360.569984][T29953]  ? fault_create_debugfs_attr+0x180/0x180
[ 1360.575831][T29953]  ? ___might_sleep+0x163/0x280
[ 1360.580700][T29953]  __should_failslab+0x121/0x190
[ 1360.585660][T29953]  should_failslab+0x9/0x14
[ 1360.590193][T29953]  kmem_cache_alloc_node_trace+0x274/0x750
[ 1360.596041][T29953]  __kmalloc_node+0x3d/0x70
[ 1360.600573][T29953]  kvmalloc_node+0x68/0x100
[ 1360.605174][T29953]  video_usercopy+0x217/0x1130
[ 1360.609964][T29953]  ? v4l_s_fmt+0xab0/0xab0
[ 1360.614394][T29953]  ? v4l_enumstd+0x70/0x70
[ 1360.618830][T29953]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1360.625088][T29953]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1360.630996][T29953]  ? __f_unlock_pos+0x19/0x20
[ 1360.635707][T29953]  video_ioctl2+0x2d/0x35
[ 1360.640049][T29953]  v4l2_ioctl+0x1ac/0x230
[ 1360.644559][T29953]  ? v4l2_prio_init+0x30/0x30
[ 1360.649266][T29953]  do_vfs_ioctl+0xdb6/0x13e0
[ 1360.653979][T29953]  ? ioctl_preallocate+0x210/0x210
[ 1360.659105][T29953]  ? __fget+0x384/0x560
[ 1360.663281][T29953]  ? ksys_dup3+0x3e0/0x3e0
[ 1360.667707][T29953]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1360.673961][T29953]  ? fput_many+0x12c/0x1a0
[ 1360.678393][T29953]  ? tomoyo_file_ioctl+0x23/0x30
[ 1360.683341][T29953]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1360.689595][T29953]  ? security_file_ioctl+0x8d/0xc0
[ 1360.694732][T29953]  ksys_ioctl+0xab/0xd0
[ 1360.698919][T29953]  __x64_sys_ioctl+0x73/0xb0
[ 1360.703524][T29953]  do_syscall_64+0xfa/0x760
[ 1360.708052][T29953]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1360.713953][T29953] RIP: 0033:0x4598e9
[ 1360.713969][T29953] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
18:07:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xa00)
syncfs(0xffffffffffffffff)

18:07:19 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x3f00, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:19 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x914, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:19 executing program 4 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

[ 1360.713977][T29953] RSP: 002b:00007f5681082c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1360.713995][T29953] RAX: ffffffffffffffda RBX: 00007f5681082c90 RCX: 00000000004598e9
[ 1360.737476][T29953] RDX: 0000000020000040 RSI: 00000000c0205648 RDI: 0000000000000003
[ 1360.737485][T29953] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1360.737491][T29953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56810836d4
[ 1360.737498][T29953] R13: 00000000004c5057 R14: 00000000004d9558 R15: 0000000000000004
[ 1360.909750][T29971] FAULT_INJECTION: forcing a failure.
[ 1360.909750][T29971] name failslab, interval 1, probability 0, space 0, times 0
[ 1360.942616][T29971] CPU: 1 PID: 29971 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1360.951775][T29971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1360.961845][T29971] Call Trace:
[ 1360.965164][T29971]  dump_stack+0x172/0x1f0
[ 1360.969525][T29971]  should_fail.cold+0xa/0x15
[ 1360.974138][T29971]  ? fault_create_debugfs_attr+0x180/0x180
[ 1360.980057][T29971]  ? ___might_sleep+0x163/0x280
[ 1360.984921][T29971]  __should_failslab+0x121/0x190
[ 1360.989954][T29971]  should_failslab+0x9/0x14
[ 1360.994447][T29971]  kmem_cache_alloc_node_trace+0x274/0x750
[ 1361.000248][T29971]  __kmalloc_node+0x3d/0x70
[ 1361.004763][T29971]  kvmalloc_node+0x68/0x100
[ 1361.009275][T29971]  video_usercopy+0x217/0x1130
[ 1361.014036][T29971]  ? v4l_s_fmt+0xab0/0xab0
[ 1361.018446][T29971]  ? v4l_enumstd+0x70/0x70
[ 1361.022866][T29971]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1361.029103][T29971]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1361.034910][T29971]  ? __f_unlock_pos+0x19/0x20
[ 1361.039586][T29971]  video_ioctl2+0x2d/0x35
[ 1361.043929][T29971]  v4l2_ioctl+0x1ac/0x230
[ 1361.048274][T29971]  ? v4l2_prio_init+0x30/0x30
[ 1361.052964][T29971]  do_vfs_ioctl+0xdb6/0x13e0
[ 1361.057646][T29971]  ? ioctl_preallocate+0x210/0x210
[ 1361.062844][T29971]  ? __fget+0x384/0x560
[ 1361.066991][T29971]  ? ksys_dup3+0x3e0/0x3e0
[ 1361.071395][T29971]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1361.077646][T29971]  ? fput_many+0x12c/0x1a0
[ 1361.082054][T29971]  ? tomoyo_file_ioctl+0x23/0x30
[ 1361.086996][T29971]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1361.093254][T29971]  ? security_file_ioctl+0x8d/0xc0
[ 1361.098383][T29971]  ksys_ioctl+0xab/0xd0
[ 1361.102550][T29971]  __x64_sys_ioctl+0x73/0xb0
[ 1361.107137][T29971]  do_syscall_64+0xfa/0x760
[ 1361.111651][T29971]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1361.117547][T29971] RIP: 0033:0x4598e9
[ 1361.121433][T29971] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1361.141237][T29971] RSP: 002b:00007f5681082c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1361.149731][T29971] RAX: ffffffffffffffda RBX: 00007f5681082c90 RCX: 00000000004598e9
18:07:19 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x915, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:19 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x4000, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xb00)
syncfs(0xffffffffffffffff)

[ 1361.157706][T29971] RDX: 0000000020000040 RSI: 00000000c0205648 RDI: 0000000000000003
[ 1361.165669][T29971] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1361.173631][T29971] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56810836d4
[ 1361.181593][T29971] R13: 00000000004c5057 R14: 00000000004d9558 R15: 0000000000000004
18:07:19 executing program 4 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:19 executing program 5:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
syncfs(r0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000004c0))
syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="c00082d2000000000000a4d4e9350128f7ffffffc6815427ea5be62059d29d5f718bcc0b2cebeb3a8701b1509b5c272d202f68141f3de057b2a713c24783097c8346cf7fb0cda300ae4600e80669c153ef157a4838e612552f12ba26e2175128c2332bc6b012477c808e183b1520e49897f3f641a5ef660fcba8c729f7"])
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000480)=0x8000, 0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getitimer(0x1, &(0x7f0000000080))
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x1)
r6 = dup2(r4, r5)
fstat(r6, &(0x7f0000001340))
ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000500)={[], 0x3, 0x53, 0x5, 0x0, 0x3f, 0x2, 0x3002, [], 0x40})
ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x4, &(0x7f0000000400)=[{&(0x7f0000000200)="f03e", 0x2, 0x4b59}, {&(0x7f0000000240)="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", 0xfa, 0xaa63}, {&(0x7f0000000340)="6b3806b48c49af7af0209fcf4d958753289a7fae11fa7bd38d38dc937deeba5ed3db9f3522fc4871257d409749e310513d575699cb30026e1dc36392068f9b0410813d253e172d60f70cdcdf422900e335217801baedd593cbc249", 0x5b, 0x3}, {&(0x7f00000003c0)="3aefefa9fa4e1914eb7bda7f2bf0a83721eeebc59838b2097f048351003878959785df7c1d34d3a927a044f8a69114107fdc0022df455beb4fde2f7e1131376f", 0x40, 0x9c2a}], 0x3b20000, 0x0)

18:07:19 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xc00)
syncfs(0xffffffffffffffff)

18:07:19 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x200000, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4020ae76, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xfffffffffffffffe)

18:07:20 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x916, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

18:07:20 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

18:07:20 executing program 2:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x800000000000803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0xd00)
syncfs(0xffffffffffffffff)

18:07:20 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x1000000, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15, 0x10, 0x3}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000b00), 0x1}, 0x20)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r1, r2)
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3f, 0x40501)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3, {0x4000983, 0xffffffff, 0x0, 0x2, 0x60a66d6a, 0x8}})
r3 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x0, 0x0, 0xfff, 0x3, 'syz1\x00', 0x6}, 0x1, 0x40, 0x4, r3, 0x9, 0x4, 'syz0\x00', &(0x7f0000000040)=['\x00', '/eth0,\x00', 'proc-security[ppp1vboxnet1!\x00', '(\x00', 'eth0\x00', '-\x00', '!\x00', '-*@{cgroup\x00', '{-/user#\x00'], 0x43, [], [0x2, 0x0, 0x7ff, 0x1]})

18:07:20 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_settime(0x0, 0x3f000000, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000))

18:07:20 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x80000000004, 0x917, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c)

[ 1362.088640][   T26] audit: type=1804 audit(1568484440.340:4280): pid=30023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir081566907/syzkaller.cjpMjG/1279/file0" dev="sda1" ino=16883 res=1
18:07:20 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x0, [0x7000000], &(0x7f0000000200)={0x980912, 0x0, [], @p_u8=0x0}})

[ 1362.218661][T30037] ------------[ cut here ]------------
[ 1362.224610][T30037] WARNING: CPU: 1 PID: 30037 at kernel/time/posix-cpu-timers.c:401 posix_cpu_timer_del+0x2f0/0x3b0
[ 1362.235288][T30037] Kernel panic - not syncing: panic_on_warn set ...
[ 1362.241894][T30037] CPU: 1 PID: 30037 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75
[ 1362.251185][T30037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1362.261341][T30037] Call Trace:
[ 1362.264644][T30037]  dump_stack+0x172/0x1f0
[ 1362.268985][T30037]  ? posix_cpu_timer_del+0x2e0/0x3b0
[ 1362.274365][T30037]  panic+0x2dc/0x755
[ 1362.278268][T30037]  ? add_taint.cold+0x16/0x16
[ 1362.282953][T30037]  ? printk+0xba/0xed
[ 1362.286947][T30037]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[ 1362.292433][T30037]  ? __warn.cold+0x14/0x3c
[ 1362.296864][T30037]  ? __warn+0xd9/0x1d0
[ 1362.300944][T30037]  ? posix_cpu_timer_del+0x2f0/0x3b0
[ 1362.306236][T30037]  __warn.cold+0x2f/0x3c
[ 1362.310483][T30037]  ? report_bug.cold+0x63/0xad
[ 1362.315272][T30037]  ? posix_cpu_timer_del+0x2f0/0x3b0
[ 1362.320568][T30037]  report_bug+0x289/0x300
[ 1362.325054][T30037]  do_error_trap+0x11b/0x200
[ 1362.329666][T30037]  do_invalid_op+0x37/0x50
[ 1362.334102][T30037]  ? posix_cpu_timer_del+0x2f0/0x3b0
[ 1362.339405][T30037]  invalid_op+0x23/0x30
[ 1362.343575][T30037] RIP: 0010:posix_cpu_timer_del+0x2f0/0x3b0
[ 1362.346133][ T3891] kobject: 'loop4' (00000000889971f9): kobject_uevent_env
[ 1362.349482][T30037] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 83 bb c8 00 00 00 00 74 16 e8 00 58 0d 00 <0f> 0b e9 87 fe ff ff e8 c4 38 48 00 e9 dd fd ff ff e8 ea 57 0d 00
[ 1362.349507][T30037] RSP: 0018:ffff88803d027a30 EFLAGS: 00010093
[ 1362.364626][ T3891] kobject: 'loop4' (00000000889971f9): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1362.376224][T30037] RAX: ffff888092214440 RBX: ffff88809c2c8e60 RCX: 1ffff1101244299a
[ 1362.376233][T30037] RDX: 0000000000000000 RSI: ffffffff8164fe10 RDI: ffff88809c2c8f28
[ 1362.376240][T30037] RBP: ffff88803d027ac0 R08: 0000000000000002 R09: ffff888092214cd8
[ 1362.376248][T30037] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: ffff888099c24500
[ 1362.376257][T30037] R13: 1ffff11007a04f47 R14: ffff88803d027a98 R15: ffff88809c2c8eb8
[ 1362.376293][T30037]  ? posix_cpu_timer_del+0x2f0/0x3b0
[ 1362.376310][T30037]  ? lock_acquire+0x190/0x410
[ 1362.376329][T30037]  ? thread_cpu_clock_getres+0x90/0x90
[ 1362.437034][T30026] kobject: 'kvm' (0000000047af78e8): kobject_uevent_env
[ 1362.438359][T30037]  ? thread_cpu_clock_getres+0x90/0x90
[ 1362.438372][T30037]  exit_itimers+0xdb/0x2e0
[ 1362.438393][T30037]  do_exit+0x1980/0x2e60
[ 1362.443187][T30026] kobject: 'kvm' (0000000047af78e8): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 1362.448615][T30037]  ? get_signal+0x392/0x2500
[ 1362.448629][T30037]  ? find_held_lock+0x35/0x130
[ 1362.448640][T30037]  ? get_signal+0x392/0x2500
[ 1362.448653][T30037]  ? mm_update_next_owner+0x640/0x640
[ 1362.448670][T30037]  ? lock_downgrade+0x920/0x920
[ 1362.448689][T30037]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1362.508789][T30037]  ? get_signal+0x392/0x2500
[ 1362.513498][T30037]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1362.518724][T30037]  do_group_exit+0x135/0x360
[ 1362.523353][T30037]  get_signal+0x47c/0x2500
[ 1362.527790][T30037]  ? lock_downgrade+0x920/0x920
[ 1362.532670][T30037]  do_signal+0x87/0x1700
[ 1362.536928][T30037]  ? __kasan_check_read+0x11/0x20
[ 1362.541963][T30037]  ? _copy_to_user+0x118/0x160
[ 1362.546742][T30037]  ? setup_sigcontext+0x7d0/0x7d0
[ 1362.551780][T30037]  ? exit_to_usermode_loop+0x43/0x380
[ 1362.557148][T30037]  ? do_syscall_64+0x65f/0x760
[ 1362.561902][T30037]  ? exit_to_usermode_loop+0x43/0x380
[ 1362.567265][T30037]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 1362.572551][T30037]  ? trace_hardirqs_on+0x67/0x240
[ 1362.577570][T30037]  exit_to_usermode_loop+0x286/0x380
[ 1362.582848][T30037]  do_syscall_64+0x65f/0x760
[ 1362.587435][T30037]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1362.593314][T30037] RIP: 0033:0x4598e9
[ 1362.597198][T30037] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1362.616789][T30037] RSP: 002b:00007ff3c7aa1cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1362.625193][T30037] RAX: 0000000000000001 RBX: 000000000075bfd0 RCX: 00000000004598e9
[ 1362.633153][T30037] RDX: 00000000004c9036 RSI: 0000000000000081 RDI: 000000000075bfd4
[ 1362.641114][T30037] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1362.649073][T30037] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4
[ 1362.660247][T30037] R13: 00007ffdbe5b3ecf R14: 00007ff3c7aa29c0 R15: 000000000075bfd4
[ 1362.670568][T30037] Kernel Offset: disabled
[ 1362.675095][T30037] Rebooting in 86400 seconds..