000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000400)="f05a0e1264de23bcfe3c326a380b1fbdd5772fee3e4dbb", 0x17, 0x3}], 0x0, 0x0)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000180)=']', 0x1)
getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f000021affc))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x202802, 0x0)

[  341.073091] audit: type=1800 audit(1590667024.962:354): pid=15546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=15848 res=0
11:57:05 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0xab, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
getrusage(0x1, &(0x7f00000000c0))
r1 = open(&(0x7f0000000080)='./bus\x00', 0x1419c2, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0)

11:57:05 executing program 4:
r0 = syz_open_dev$audion(0x0, 0x80, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="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", 0xfe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000340), 0x0)
ftruncate(r1, 0x800799c)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r1, 0x0)
bind$x25(r0, &(0x7f0000000140)={0x9, @remote={[], 0x0}}, 0x12)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40280, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setreuid(0x0, 0x0)
socket(0x0, 0x5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x20000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

11:57:05 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x800, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x80)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0))
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

11:57:05 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000200)={0x30000, 0x10001, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c090c, 0x4, [], @value=0x4}})
write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe)
r1 = socket(0x23, 0x2, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000ed60413596bf9102", @ANYRES32=<r3=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r3}, 0x14)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x9}, 0x8)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, 0x0)
setuid(r4)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)

[  341.748045] audit: type=1800 audit(1590667025.642:355): pid=15574 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16097 res=0
11:57:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
close(0xffffffffffffffff)
fchdir(r0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140066000000000000000300"], 0x1}}, 0x4000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0x0, 0xee00)
syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000480)='./file0/file0\x00', 0xff69, 0x3, &(0x7f0000000640)=[{&(0x7f00000004c0)="560f1e0909a2bac2100ae56f533484c19e467f4e5147cd255c24463e4b96ac83b0f8c1b120984d5b", 0x28, 0x28}, {&(0x7f0000000500)="489f1d60f505b951b13d3378d54ec1827a6e00c484b590198e9730ddabe68fe9c1373850eecaaf74b77b39b822d82c860877f6e24c30474e73b71db7f77445f6622bb1283a8366b6f2cde1d9bda5182b40f56d981c1bc184193e605b90dc9090839e2198ddbe58c776c0e3dcd6cf071f4c1f78de8ecc7bce616fbad0d4e3018f2e9ef47d3472baa6bad52c1a7413bb5e376cef60fe98d339572035e50cd59909c3a42e2c89777423a366186a342abd4a80d593cdd9d176635eda838ad20b59", 0xbf, 0x9}, {&(0x7f00000005c0)="b5947fd0cd7a5559b427b5931ca1e1734f1bb50472bd6a70c12710cf67cc4cd9cb685a9ae74f9b94572d88bd434c62b8ea72ced2a7767f22c1dd7fc808978decd3e2a6dfc0ded867485571e504810169239df4328a3d2a0e4c8efd0afd07738802", 0x61, 0x2}], 0x0, &(0x7f00000006c0)={[{@part={'part', 0x3d, 0x7}}, {@uid={'uid'}}, {@force='force'}, {@nodecompose='nodecompose'}, {@nls={'nls', 0x3d, 'cp863'}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '}security\'vboxnet0ppp0eth1!'}}, {@appraise_type='appraise_type=imasig'}]})
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x40046104, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x0, 0x0, 0x1b, 0x0, 0x5, 0x3})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x244000, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d9007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00')
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xf0945000)
ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x0, 0x2000, 0x6000], 0x8, 0x8c})
flistxattr(0xffffffffffffffff, 0x0, 0x0)

[  341.858058] audit: type=1800 audit(1590667025.742:356): pid=15550 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=15848 res=0
11:57:05 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
fchmod(r3, 0x48)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r2, r4, 0x0, 0x8000fffffffe)
ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000000))

[  341.991461] QAT: Invalid ioctl
[  342.184805] audit: type=1800 audit(1590667026.072:357): pid=15591 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16129 res=0
[  342.236149] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  342.264490] FAT-fs (loop3): Filesystem has been set read-only
11:57:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
close(0xffffffffffffffff)
fchdir(r0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140066000000000000000300"], 0x1}}, 0x4000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0x0, 0xee00)
syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000480)='./file0/file0\x00', 0xff69, 0x3, &(0x7f0000000640)=[{&(0x7f00000004c0)="560f1e0909a2bac2100ae56f533484c19e467f4e5147cd255c24463e4b96ac83b0f8c1b120984d5b", 0x28, 0x28}, {&(0x7f0000000500)="489f1d60f505b951b13d3378d54ec1827a6e00c484b590198e9730ddabe68fe9c1373850eecaaf74b77b39b822d82c860877f6e24c30474e73b71db7f77445f6622bb1283a8366b6f2cde1d9bda5182b40f56d981c1bc184193e605b90dc9090839e2198ddbe58c776c0e3dcd6cf071f4c1f78de8ecc7bce616fbad0d4e3018f2e9ef47d3472baa6bad52c1a7413bb5e376cef60fe98d339572035e50cd59909c3a42e2c89777423a366186a342abd4a80d593cdd9d176635eda838ad20b59", 0xbf, 0x9}, {&(0x7f00000005c0)="b5947fd0cd7a5559b427b5931ca1e1734f1bb50472bd6a70c12710cf67cc4cd9cb685a9ae74f9b94572d88bd434c62b8ea72ced2a7767f22c1dd7fc808978decd3e2a6dfc0ded867485571e504810169239df4328a3d2a0e4c8efd0afd07738802", 0x61, 0x2}], 0x0, &(0x7f00000006c0)={[{@part={'part', 0x3d, 0x7}}, {@uid={'uid'}}, {@force='force'}, {@nodecompose='nodecompose'}, {@nls={'nls', 0x3d, 'cp863'}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '}security\'vboxnet0ppp0eth1!'}}, {@appraise_type='appraise_type=imasig'}]})
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x40046104, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x0, 0x0, 0x1b, 0x0, 0x5, 0x3})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x244000, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d9007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00')
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xf0945000)
ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x0, 0x2000, 0x6000], 0x8, 0x8c})
flistxattr(0xffffffffffffffff, 0x0, 0x0)

[  342.538917] audit: type=1800 audit(1590667026.432:358): pid=15576 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16097 res=0
[  342.895496] audit: type=1800 audit(1590667026.782:359): pid=15611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16129 res=0
[  343.298181] QAT: Invalid ioctl
[  343.426837] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[  343.445698] FAT-fs (loop3): Filesystem has been set read-only
[  343.545959] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
11:57:07 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x3004845, 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

11:57:07 executing program 1:
memfd_create(&(0x7f0000000040)=',cgroupwlan1\x00', 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000000))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=<r2=>0x0)
syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid\x00')

11:57:07 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9)
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2, 0x3ff, 0x0, 0xff, 0x9, 0x4, 0x5, 0x1, 0x3307})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x8)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x2, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xaf}]}, 0x44}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

11:57:07 executing program 3:
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xeb, 0x1, 0x1, "8ef3346e164a6284d09d77cb53da825c", "380153f3469fcf1f5de491f7da2f9a1ba2a7a6a5e5b371dd6a7d6f07a2cfab1310451b0652b3907746cd9e8ce70d366c5a2fed1fede07482fb10779d111a11bca0dd40446f6aee2fa375dabe386a78e87cfc3bfe94b2a4187e283b2bd4db03d8fa33b2bf909f8438cd4c69ab8c16e4beef29794c006ac2690c7ffcbe84e98d784194401a9f176b8d672a007cf9cc62c1dde644b7e2be3399dc55dc52bc71b7cde27433ec9a3000793314d9f17bcb50519ad7a3d5813f221671f8482d2c7f49d6567a6c6f4964badd6c8fd7f9fec8bea1f95eefa893be"}, 0xeb, 0x0)
ioprio_set$pid(0x2, 0x0, 0x7e35)
clone(0x82a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:57:08 executing program 3:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:08 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000140a010200000000000000005b0003ff0c00064000000000000000010900020073797a300000000008000340000000080900020073797a32000000000c00064000000000000000050900010073797a30000000000c0006400000000000000004a4000000030a01"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/111, &(0x7f0000000080)=0x6f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

11:57:08 executing program 1:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @multicast1}, &(0x7f00000001c0)=0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0xbf5b})
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
r5 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffffffffffffff7f, 0xa000)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0xe7ed, 0x4, 0x6, 0x0, 0xa426})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r2}, 0x10)

[  344.290487] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:08 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x201}, 0x20)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d000010)

11:57:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
exit(0x0)
clone(0x104480, &(0x7f0000000140)="7feb619070660c271ecda71606fbac1867882d239fa105e3b4fbb37939efd5b74eeecb83cd8a16e8dcd9e4406aff049a56fcf8aa2ae7df32b5dc8f076453b2696bba5627efd63024cd714310180cfed47aea62c18fd20e18fd51dffbc947c65b2b050caee0b7f9901229e919205d1b8127d76e17cf1ac8461c6ed1f600e204c5515fac4be13c6424afb05b9e2b0b631dcd5566b9844f9f4aceafa5b26ce0d41af3ce986934db568432d8476c55705fd5b95e", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200))

[  344.340206] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:08 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x210000, &(0x7f00000007c0)={[{@subvol={'subvol', 0x3d, 'map_files\x00'}}]})

11:57:08 executing program 3:
setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/218)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0)
setxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17)
unshare(0x40040400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc52c78a40cd3a5451e67f034d64570e101726293208e913d3", @ANYRES16=0x0, @ANYBLOB="3f02000000000000000001000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0xfffffff0}, 0x20000000)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0xdf, 0x4, 0x4, 0x70000, 0x6, {r2, r3/1000+10000}, {0x1, 0x2, 0x59, 0x0, 0x0, 0xe5, "1c1fc833"}, 0x7, 0xd4139dc0281d629e, @userptr=0x2, 0x3f, 0x0, <r4=>r1})
accept$unix(r4, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7acda4d30908cc43}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x77)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))

11:57:08 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
exit(0x0)
clone(0x104480, &(0x7f0000000140)="7feb619070660c271ecda71606fbac1867882d239fa105e3b4fbb37939efd5b74eeecb83cd8a16e8dcd9e4406aff049a56fcf8aa2ae7df32b5dc8f076453b2696bba5627efd63024cd714310180cfed47aea62c18fd20e18fd51dffbc947c65b2b050caee0b7f9901229e919205d1b8127d76e17cf1ac8461c6ed1f600e204c5515fac4be13c6424afb05b9e2b0b631dcd5566b9844f9f4aceafa5b26ce0d41af3ce986934db568432d8476c55705fd5b95e", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200))

[  344.761359] IPVS: ftp: loaded support on port[0] = 21
11:57:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x8, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x3c, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL]}, 0x28}}, 0x0)

[  345.116078] IPVS: ftp: loaded support on port[0] = 21
11:57:09 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000500ac141400080002000000bab5000008000400ffffffff0c000300000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00')
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r5, 0x80006)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40009}, 0x20008000)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4414}, 0xc8001)

11:57:09 executing program 3:
setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/218)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0)
setxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17)
unshare(0x40040400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc52c78a40cd3a5451e67f034d64570e101726293208e913d3", @ANYRES16=0x0, @ANYBLOB="3f02000000000000000001000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0xfffffff0}, 0x20000000)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0xdf, 0x4, 0x4, 0x70000, 0x6, {r2, r3/1000+10000}, {0x1, 0x2, 0x59, 0x0, 0x0, 0xe5, "1c1fc833"}, 0x7, 0xd4139dc0281d629e, @userptr=0x2, 0x3f, 0x0, <r4=>r1})
accept$unix(r4, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7acda4d30908cc43}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x77)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))

[  345.326388] audit: type=1800 audit(1590667029.212:360): pid=15756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16033 res=0
11:57:09 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:09 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
exit(0x0)
clone(0x104480, &(0x7f0000000140)="7feb619070660c271ecda71606fbac1867882d239fa105e3b4fbb37939efd5b74eeecb83cd8a16e8dcd9e4406aff049a56fcf8aa2ae7df32b5dc8f076453b2696bba5627efd63024cd714310180cfed47aea62c18fd20e18fd51dffbc947c65b2b050caee0b7f9901229e919205d1b8127d76e17cf1ac8461c6ed1f600e204c5515fac4be13c6424afb05b9e2b0b631dcd5566b9844f9f4aceafa5b26ce0d41af3ce986934db568432d8476c55705fd5b95e", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200))

11:57:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0)
io_setup(0x7fffffff, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000240))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000506070000e9f300000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r7, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r7, 0x0, 0xfffffecc)
ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000240)={0x3dbd, 0x5284, 0xfffffffffffffff9})
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x5, 0xc7, {"8ea9f04da0d13fe82ee1d164d5081443"}, 0x1, 0x4, 0x100000001}}}, 0x90)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32=r6, @ANYBLOB="080002"], 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[  346.045626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  346.103545] audit: type=1800 audit(1590667029.992:361): pid=15756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16033 res=0
11:57:10 executing program 3:
setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/218)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0)
setxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17)
unshare(0x40040400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc52c78a40cd3a5451e67f034d64570e101726293208e913d3", @ANYRES16=0x0, @ANYBLOB="3f02000000000000000001000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0xfffffff0}, 0x20000000)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0xdf, 0x4, 0x4, 0x70000, 0x6, {r2, r3/1000+10000}, {0x1, 0x2, 0x59, 0x0, 0x0, 0xe5, "1c1fc833"}, 0x7, 0xd4139dc0281d629e, @userptr=0x2, 0x3f, 0x0, <r4=>r1})
accept$unix(r4, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7acda4d30908cc43}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x77)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))

11:57:10 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
write$binfmt_misc(r2, &(0x7f0000000400)={'syz1', "e00e93297eea78bc7dc9c0cdcc174ce56a0070d3638f230a3089bd6fa9afbe764edeb45c02161660a6fc00e2e90e148a9c809adb3be11e95ffb2857d794764256cc9b94a2a6ac8ad5191592f248faec4cd90c3e80d8e96f001cb492192bd688093de8369a7376140a4de1022a7caa3797f9ec124b47cdceff3e4e30b4f159f69834d3cd7b4f57f9ef05947b7d8711ed9614243f310b79ab80df0822c2e15de96dbeaffb92ddae0e1f16353b794649342f85a4a33dcc102022220642ccb3d9a42260f50b996e483e0f6a2d4bc57ec32573711623102fb795b11064ae5dd64035f8c0cba611d7dd699"}, 0xec)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x78)
r3 = dup(r0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x14, r6, 0xf20aaac1f6a2385f}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x10)
vmsplice(r4, &(0x7f0000000140), 0x0, 0x6)
bind$isdn_base(r4, &(0x7f00000001c0)={0x22, 0xff, 0xeb, 0x1, 0x7f}, 0x6)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000180))
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x200)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x923640, 0x0)
sendmsg$AUDIT_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x8, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000080}, 0x48004)

[  346.343331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
11:57:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30)
exit(0x0)
clone(0x104480, &(0x7f0000000140)="7feb619070660c271ecda71606fbac1867882d239fa105e3b4fbb37939efd5b74eeecb83cd8a16e8dcd9e4406aff049a56fcf8aa2ae7df32b5dc8f076453b2696bba5627efd63024cd714310180cfed47aea62c18fd20e18fd51dffbc947c65b2b050caee0b7f9901229e919205d1b8127d76e17cf1ac8461c6ed1f600e204c5515fac4be13c6424afb05b9e2b0b631dcd5566b9844f9f4aceafa5b26ce0d41af3ce986934db568432d8476c55705fd5b95e", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200))

11:57:10 executing program 0:
mkdir(&(0x7f0000000480)='./file0\x00', 0x149)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={<r3=>0x0, <r4=>0x0}, &(0x7f00000003c0)=0xc)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='t\b\x00\x00\x00=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=r4, @ANYBLOB="2c08797013054d7e75b4708746ee4e97def5eadd0f3205ab6c002c3265129c1cbc2d98a4ed2d889248697bbaa74797c0871a85b60d0eb0bc3b6c66c8e8e9db7321b55ea86069c4675098965e5eb2f5c1e50dbecfc007637aa62954297d27159f6eda3d8bcefaa0e09d49a3b66d7814326f6bb1836af3a54bc347279c9e6a3fd52c75d33fc5a9e2a9"])
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
socket$bt_hidp(0x1f, 0x3, 0x6)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendmsg$AUDIT_SET(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd29, 0x25dfdbfc, {0x4, 0x1, 0x1, r3, 0x4, 0xfff, 0x2, 0x7ff, 0x0, 0x6}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008811}, 0x800)
r6 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
keyctl$update(0x2, r6, &(0x7f0000000000)="9095c9c33baf2d59ded9081e2ea33f44977196e4222f71596a05c22dcb6cfc70827584140b63ba207f46207e8a6a2864d9bb31ee08b52568fd111d7ed45a05", 0x3f)
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e21, 0x7, @mcast1, 0x8}, {0xa, 0x4e21, 0x1f, @mcast2, 0x1}, 0x7, [0xffffff61, 0x0, 0x3, 0x800, 0xffff, 0x8, 0x5, 0x8001]}, 0x5c)

11:57:10 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002880)=[{{&(0x7f0000000300), 0x80, &(0x7f0000000d40)=[{&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/205, 0xcd}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f0000001140)=""/248, 0xf8}, {&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/125, 0x7d}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)=""/188, 0xbc}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000980)=""/251, 0xfb}], 0x4, &(0x7f0000000a80)=""/40, 0x28}, 0x8}, {{&(0x7f0000000ac0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000b40)=""/146, 0x92}, {&(0x7f0000000c00)=""/112, 0x70}, {&(0x7f0000000c80)=""/29, 0x1d}, {0x0}, {0x0}], 0x5, &(0x7f0000000e00)=""/133, 0x85}, 0x5}, {{0x0, 0x0, &(0x7f0000001240)}}], 0x4, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000080)="d3ebc5318fb38b95fe443190f295247880cad83a58f1", 0x16)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40000000000}, 0x0)
r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x5, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[  346.919290] audit: type=1804 audit(1590667030.812:362): pid=15836 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir727649320/syzkaller.96AC2n/184/bus" dev="sda1" ino=16373 res=1
11:57:10 executing program 3:
setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/218)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x0, 0x0)
setxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17)
unshare(0x40040400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc52c78a40cd3a5451e67f034d64570e101726293208e913d3", @ANYRES16=0x0, @ANYBLOB="3f02000000000000000001000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0xfffffff0}, 0x20000000)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000004c0)={0xdf, 0x4, 0x4, 0x70000, 0x6, {r2, r3/1000+10000}, {0x1, 0x2, 0x59, 0x0, 0x0, 0xe5, "1c1fc833"}, 0x7, 0xd4139dc0281d629e, @userptr=0x2, 0x3f, 0x0, <r4=>r1})
accept$unix(r4, 0x0, &(0x7f00000001c0))
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7acda4d30908cc43}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x77)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))

[  347.114628] audit: type=1804 audit(1590667030.882:363): pid=15837 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir727649320/syzkaller.96AC2n/184/bus" dev="sda1" ino=16373 res=1
11:57:11 executing program 1:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x108)
ioctl$TCXONC(r0, 0x540a, 0x3)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="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", 0x1000, 0xffffffffffffffff)
keyctl$get_keyring_id(0x0, r1, 0x40)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:11 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x51b001, 0x0)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20000, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000040)=0xff1d)

11:57:11 executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=ANY=[], 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000200))
write(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0xf)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r4 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200800)
ioctl$NBD_CLEAR_QUE(r4, 0xab05)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1, 0x1, 0x0, 0x1}, {0x3}}, {{0x4}, {0x2, 0x1}}, {{0x2}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x40)

[  347.593877] audit: type=1804 audit(1590667031.482:364): pid=15855 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir727649320/syzkaller.96AC2n/184/bus" dev="sda1" ino=16373 res=1
11:57:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01"], 0xb8}}, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/dlm_plock\x00', 0x801, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/partitions\x00', 0x0, 0x0)
io_submit(0x0, 0x9, &(0x7f0000001bc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x81, 0xffffffffffffffff, &(0x7f0000000800)="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", 0x1000, 0xa8b, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x717, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xffffffff}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000380)="2a2bd6572fafcfe585a5e6de73c2830cf0f0fd20212394", 0x17, 0x8, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x7ff, 0xffffffffffffffff, &(0x7f0000000480)="c6e93bbe12393eda6b439cbc937ff57e1a755a8f9ac724963e79260a1d60ff392c8ca8076d491a700f235bb4", 0x2c, 0x100000001, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x399, 0xffffffffffffffff, &(0x7f0000000680)="2ef8d453d6fd58a03d17a8104a595e4425a0054934911c9bd00fb7131b2cb535e06bdde6d40b46639c266bda467b62e5af2123f4e5e9cbfc6b721b5df739cdd0f696ab0b765accb3ffd6b592fa381980bef5e9e1e8ee3b2b20b94cdb63107dcd3339cdc62b458607f1aabdedd158a9d70b577eeda65c9da6818ef475c10fa27c5609ba60a2ab11318a19b0c29cf6d41e286c95e973ab9158ff4295e3dd5c788642721c503c22518ee291af2195bd66298c8f32d31c8ae3207b3a2ac96c5f52958ab8a120bda70551c138", 0xca, 0x3, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x40, 0xffffffffffffffff, &(0x7f0000001800)="99af2e2d0e0c4486fb2164c5a2b7e634c2f5f78d7a3d0c3c5a3e10fd0d9442b0882d9ceefa229c7f39fa0d5e2ebe8e42a5dea042823ad647900ebc40fae154bb8294105ef5b492ad46307419e6845bf3b625", 0x52, 0x4, 0x0, 0x30ba152f6eae4983}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffffffffffffffff, &(0x7f0000001880)="6085d32a8e2f960c7c2cd672a01c063e376d3fa46cee4e7fc843edc6e69573467fbe54d52de09b740c0ef16945e7acc772fecf7ef8fe10af6ba51aa9648947f5fcf1baa00806fcae2ee1d6a6", 0x4c, 0x1eff, 0x0, 0x3, r1}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000001900)="c819eb14b26bf04f9bc56c3a1626eecfa7b04b37e9193c90d8b7074631bacd77338f99702d802a70d572ea39a3b2a598a047b24e00c89c0fe33d33f833339a3daa1c894b67f59053aa41fa47d407be3618e2e72d482f261251fe27583f51777bca99a5487081de40074380b864997c056f917403873afa9549e6d7a3b302b715c4b11e91797eba00759a8e89827b035a03254e1cb7b26d1a8a3fc599c0493761955583b25da0db8b9307763efbf7a2b5b762b61efc85031229d05d857e7e08440751748bf00a6d57c4027443381ce413e88a84136e397809ef48a9e31e431287b561f2d3a535fc6e5d8d20a1f3382a5ed7", 0xf1, 0x1, 0x0, 0x6, r3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x1, 0x668e, r4, &(0x7f0000001ac0)="f585de96a3fe343971ce12564c37ff04a2381bd93fdc1f93d02565ac21f5bb06a6ba8c5e6dc2cef080f050f08c60a41664204db57461e841cd3c47cc3af30ddadf8b46a9be705c352144cf74e11f961bd1c9320d4a216dd36adfed9b114b373ac52aab934a4183dcaa00f48be632ea2a01af0e07ed2c7af047ca5b2261b15a7d6e2f0577472db3366dbdbd8b133eeaa1c0735a15cf9b0888882860d027", 0x9d, 0x4, 0x0, 0x1}])
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8102, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310000000000000000000a0000003c0003000800400000000000140002006c6f0000000000009d31f0aa0000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x573}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x2)

11:57:12 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:12 executing program 0:
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x20)
mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperLir=./file0'])
rmdir(&(0x7f00000000c0)='./bus/file0\x00')

11:57:12 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r3 = socket(0x23, 0x2, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4)

11:57:12 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0400000000000000666174000404090a02ee6c7400f8", 0x16}], 0x0, 0x0)

[  348.336850] overlayfs: unrecognized mount option "upperLir=./file0" or missing value
[  348.354417] FAT-fs (loop3): bogus number of directory entries (27886)
[  348.361665] audit: type=1800 audit(1590667032.252:365): pid=15871 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16395 res=0
[  348.366211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  348.395214] overlayfs: unrecognized mount option "upperLir=./file0" or missing value
[  348.417666] FAT-fs (loop3): Can't find a valid FAT filesystem
11:57:12 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000ed23000b0f00009429381158c9938f00"/28, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100706c7567"], 0x3c}}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000047c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x10}}, 0x1c, 0x0}}, {{&(0x7f0000001340)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0)

11:57:12 executing program 3:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1b8939885ccbb3c3aeead2e22c90fef072256e00e678290f5bb3b5d2fcf887ffa7f0ec00b74473a06025b5a57b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503e9fc0b01542ab5bd2d23e04b258634bd754c9d2488ad379fadcaffda227bd28f64d155039b07fb8289bac18590f6daf256b5f0876a20b9c01607839eaecf5036b7dd442d1966979a3686a0feeac04a641cd5e010337fd1514c1c9bb495bb16aa5910841ce"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000040))
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e)
io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)="03621c1e7092f32dd23e5eded4b6471a06eb06e26ab6b755b6fb869531b3d80829c8bd0b8e9de401609e1a851fb679f7150b88274759ae508cc0b665f3e95ee79fdcd0ba055c8f5654af7d9eff123c797f8f9d2a2feb7fc6cf728e9f30426a7915bcc7fea0a89ed7b57b39935f7b0c24f7cc161c26fd572275e6e41c7bb79dc95943bc9cbe", 0x85, 0x7, 0x0, 0x7, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x298, 0xffffffffffffffff, &(0x7f0000000080)="709c10a51ccd97f33146140539cc64727e73e0fc74c996b9bb2c6ec4fb22d3c583764e16ed10ffc4", 0x28, 0x1, 0x0, 0x3}])
r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x505001, 0x109)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000580)={0x7ff, [[0x200, 0x1f, 0xffffff71, 0x80000000, 0x9, 0x40, 0x2, 0x3], [0x6, 0x0, 0x1, 0x52, 0x2, 0x4, 0x5937, 0x2], [0x3ff, 0x80000000, 0x401, 0xfe, 0x80000000, 0x5, 0x4fb, 0x9]], [], [{0x8, 0x3ff, 0x1, 0x1}, {0x5, 0x20, 0x1, 0x0, 0x0, 0x1}, {0x65, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4c5, 0x3f, 0x0, 0x0, 0x0, 0x1}, {0x80000000, 0x40, 0x1, 0x1}, {0x0, 0x80000001}, {0x2, 0x800, 0x1, 0x0, 0x0, 0x1}, {0x89, 0x1, 0x0, 0x0, 0x1}, {0xe14, 0xfffffffd, 0x0, 0x1, 0x1}, {0xfffffbff, 0xe6d}, {0x5, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x3}], [], 0xffffff00})

[  348.533004] audit: type=1800 audit(1590667032.423:366): pid=15871 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16395 res=0
11:57:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="b2b1c8ceaf87c3f97fc6589235e84853a5dd318b328f9c09554ba8ebbf43653f2e665728a6a33cccc44c3cef1144a6c400"/60, 0x3c}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000})
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600))
open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r9], 0x12da00)
sendfile(r5, r9, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  348.668596] libceph: connect [::6]:6789 error -101
[  348.674094] libceph: mon1 [::6]:6789 connect error
[  348.705358] libceph: connect [::6]:6789 error -101
[  348.727207] libceph: mon1 [::6]:6789 connect error
[  348.797751] audit: type=1804 audit(1590667032.693:367): pid=15899 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir727649320/syzkaller.96AC2n/186/bus" dev="sda1" ino=16365 res=1
11:57:12 executing program 0:
r0 = memfd_create(&(0x7f0000000080)='#! ', 0x1)
write$binfmt_script(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="23a1"], 0xa)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x26}}}, [0x9, 0xffffffffffffff7f, 0xffff, 0x4, 0x8, 0xae, 0x12c, 0x4, 0xffff, 0x100, 0x0, 0x6, 0x1, 0x875, 0x7ff]}, &(0x7f0000000140)=0x100)
r3 = socket(0x23, 0x2, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040), &(0x7f000095dffc)=0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000), 0x14)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x40, 0x2, [0x8792, 0x200]}, &(0x7f00000000c0)=0xc)

[  348.997018] libceph: connect [::6]:6789 error -101
[  349.004310] libceph: mon1 [::6]:6789 connect error
11:57:13 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x4, 0x1, 0x7}, 0xc)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000000))
sendmsg$rds(r3, &(0x7f0000001780)={&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=[@rdma_args={0x48, 0x114, 0x1, {{0x7fff, 0x4}, {&(0x7f0000000100)=""/29, 0x1d}, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000001500)=""/107, 0x6b}, {&(0x7f0000001580)=""/156, 0x9c}, {&(0x7f0000001640)=""/83, 0x53}], 0x4, 0x0, 0x2}}], 0x48, 0x40}, 0x2000011)
socket$pppl2tp(0x18, 0x1, 0x1)

[  349.199753] audit: type=1800 audit(1590667033.093:368): pid=15906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16367 res=0
[  349.390907] ceph: No mds server is up or the cluster is laggy
[  349.406776] ceph: No mds server is up or the cluster is laggy
[  349.414168] libceph: connect [d::]:6789 error -101
[  349.422504] libceph: mon0 [d::]:6789 connect error
11:57:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r0=>0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
close(r2)
write$cgroup_int(r1, &(0x7f0000000100), 0x47)
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x4)
ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x0, @addr=0x8000}, 0x8, 0x4, 0x4})
gettid()

11:57:13 executing program 4:
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x100000000, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@logbsize={'logbsize', 0x3d, [0x33]}}]})
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0xee00)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, 0xee00)
syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x8, &(0x7f0000002580)=[{&(0x7f00000001c0)="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", 0x1000, 0x6}, {&(0x7f00000011c0)="722cb0f9987653f297aa73af0c36bb1a6f9880d1cf5e67c21a2c13d9aa26f40e12e6d1004d8ee58c267fd22573e0a76c73d606f5202a7adb8674860533fece6844a2207a562c05c8c76edbad681554f6d885f35b353bb4d0055f430830889c9c5b32769b496235d374e52adfecfea7a41f62d35a5e061c557ced3b0862f4333d89e2669ddb20b21c37681ad1438b10f5036f0c0d636205fb755d99f802a5e834b6fa89156d32fe7a31de3e232339e8815ef8f2959417e44ce8a030682294c5fcb5d3dbddb902d92330dd6387838f37b9e1917286d14199bec049ea03c4fd1506f33f194381069d", 0xe7, 0xff}, {&(0x7f00000012c0)="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", 0x1000, 0x4}, {&(0x7f00000022c0)="57056b504d8fd72b91a109af70f8408215eb8de7147f8c59868e7b2d4806665d95685276716fc487927c5131be24f9d92eb8080e0e23b3329ff9149609f2c451b02160f585f94776c5d78a445ab5f00b4f77bc78dabdcc70f15ae6956da8bd3248ac67aec3d696e1acfd1cb8b4202a394394268b79f9e2e760b3a93b5c1a5f981a9eadc2fdf1ad85f49ad4b18906171f84affa7761b5c5", 0x97, 0x2}, {&(0x7f0000002380)="6f5c2559a08301ca411482922a0310dc9bb32469a65446c69b90bd285e6a3402a864c77def19e99ae6c619ea9bf95b6620830c81385694ff6cf437efbcc87617a17c0c9c1dfead583b95abe28f039f85798dfa269afb11298721efa1daef73600d32a51244531685dfcc1bc83aba99a5208b3973aaa1b8665833be5a06f9f43bec82959ca59b6686be0b363e1041d132972995c42679116f249c323145c2f4a8308f266a6272b544d5f8068fe6da53551ff245733e3bc049a4f470c4566557bde239a227b74192fd204cf8f034759ca1f7d7f517", 0xd4, 0x2}, {&(0x7f0000000100)="f0a8888c443ada690222a1d4b8c8be3e6c82108576c244cc320fc1331aac22b2ff5c71c8530daf74225b17e9596d2738a7e3e2", 0x33, 0x9}, {&(0x7f0000002480)="b011d13b40a2400918a5b0ffd7b73f75653308480116fe4d88d2987d6854c26ce19bb1586fc30aace0945e9f8dc9303683d194be5c362c7599d0f3fb2ff38a3a3ba7e591fad8b802583971251b5de2b01be981f315eea4", 0x57, 0x2}, {&(0x7f0000002500)="16055cc7f3c1631f02bf30712036c380729dde460c4e9bf4e4ca0792c918bf0883de92f7f7a9ebfa6bd3bdd3dbfdd9259e80151d626b49897bb2d0cc08014373b08f63f664b9315f4878e1676ced77f8b1c48cca977436967973c75e983ff825300ecbc01e56a7da741e7c7c03fe8c3f478ed9b49d39a395", 0x78, 0xffffffffffff8001}], 0x10, &(0x7f0000002640)={[{@gid={'gid', 0x3d, r1}}, {@case_sensitive_yes='case_sensitive=yes'}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_gt={'uid>', r3}}, {@euid_lt={'euid<', r5}}]})
uselib(&(0x7f0000000040)='./file0\x00')

11:57:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r0=>0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
close(r2)
write$cgroup_int(r1, &(0x7f0000000100), 0x47)
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x4)
ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x0, @addr=0x8000}, 0x8, 0x4, 0x4})
gettid()

[  349.683543] XFS (loop4): invalid logbufsize: 3 [not 16k,32k,64k,128k or 256k]
[  349.911179] audit: type=1800 audit(1590667033.803:369): pid=15939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16367 res=0
11:57:14 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:14 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x77, 0x0, 0x0, 0x20044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100240, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}])
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x401c005, 0x0, 0x0)
io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, &(0x7f0000000180)="116a911a2fd1d8fddf1cd91aaf063d7fa32f3be41755ada4973187298672e63c795a1876f4b4b7f4f9e1a7a03964ff9de6e69b5d7595b0ab00b2aee898fd6c7620ea5dba742766d46487f96b1bc616bda6c2707ec44e849f7dc6cbb05c804e3fb608394134838fb10ea2e2c7c13fabf60112ebc3b51de0", 0x77, 0x9662, 0x0, 0x2, r0}, 0x0)

11:57:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x709}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf25110000000600140180000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008001)

11:57:14 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x2, 0x70, 0x1, 0x1, 0x7d, 0x81, 0x0, 0x1ff, 0x4001, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x40210, 0x2, 0x288, 0x9, 0x7, 0xfffffff8, 0x7})
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="1020f5f29008070009000000030000000c00000009000000000000000000d330edffffff00000e000000180000000200001902", 0x33, 0xffffffffffffff01}], 0x10594d4, 0x0)

11:57:14 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x9, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909de, 0x6, [], @p_u8=&(0x7f0000000040)=0x72}})
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x9, @fixed={[], 0x11}, 0xfff8, 0x2}, 0xe)

11:57:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r5, 0x80006)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000000c0)=0x8, 0x4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x535082, 0x0)
ioctl$SG_SCSI_RESET(r7, 0x2284, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x44}}, 0x0)

[  350.810208] audit: type=1800 audit(1590667034.703:370): pid=15952 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16407 res=0
11:57:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x1000)
r2 = socket(0x23, 0x2, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4}, 0x14)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r4, 0x7ff}, 0x8)
r5 = timerfd_create(0x0, 0x0)
r6 = fcntl$dupfd(r0, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@creator={'creator', 0x3d, "51e386fe"}}]})

11:57:15 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  351.158028] hfsplus: unable to find HFS+ superblock
11:57:15 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000140)={0xc0, 0x4, 0x6d})
r3 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000180))
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdf1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x0)

[  351.643807] kauditd_printk_skb: 2 callbacks suppressed
[  351.643817] audit: type=1800 audit(1590667035.533:373): pid=15965 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0
11:57:15 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x101ff, 0x2, 0x2, 0x2000, &(0x7f000001a000/0x2000)=nil})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  351.713919] audit: type=1800 audit(1590667035.583:374): pid=15990 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16409 res=0
[  351.761324] audit: type=1800 audit(1590667035.633:375): pid=15991 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16408 res=0
11:57:15 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000430001000000000000000000000000000500010020000000"], 0x1c}}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8100}, 0xfffc}}, 0x80)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
r5 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x5, 0x1f, 0x7, 0x4, 0x0, 0x3ff, 0x40, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x83ea0449960f70a0, @perf_bp={&(0x7f0000000100), 0x4}, 0x5a48, 0x8, 0x80000000, 0x3, 0x7, 0x200, 0x2}, r5, 0xb, r1, 0x8)
socket$can_bcm(0x1d, 0x2, 0x2)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x59)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x5)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0)

[  351.909576] hfsplus: unable to find HFS+ superblock
11:57:16 executing program 4:
ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0)
syz_emit_ethernet(0xac, &(0x7f0000000140)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0xab, "c3", "cffb13", 0x886c, "6607882658427e8e76009454e0451d9bc8add77dc6dc6bf740803f7bb9266d505c9bee196d3325b2fbc65b00000000000000060a8b3727f176f0a82a077f634f6589e9b35e3aa4755b90d24995bbd733af89c0efb88fa83a3edadb63377ce7916be19c1cd1a0a065c00a9b974be57dee531f407a7c808707b13b567a14ed6687fb2616d50a4610a19ab5c653b1271b03e02d"}}}}}, 0x0)

11:57:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0xffffffe3})
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

11:57:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socketpair$unix(0x1, 0x8c13df13e0d3f37d, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000000)={0x7, 0x2, 0x8, 0x1f})

[  352.445506] audit: type=1800 audit(1590667036.333:376): pid=16024 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16409 res=0
11:57:16 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:16 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x2, {0x10001, 0x10000003, 0x4}})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:16 executing program 2 (fault-call:10 fault-nth:0):
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  352.670599] audit: type=1800 audit(1590667036.563:377): pid=15994 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16409 res=0
11:57:16 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x5, 0xfe, 0x1, 0x3f, 0x80, 0x1, 0x20, 0x6, 0xf9, 0x4, 0x81, 0x60, 0x2}, 0xe)
r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', r4})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x200c8001)
r5 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x12, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000001c0))
ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, &(0x7f0000000080))

[  352.856180] vivid-003: disconnect
11:57:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x100, 0x0, 0x9c, 0x1ff, 0x16c4c020}, 0xc)
socket$kcm(0x29, 0x5, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2$9p(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@version_L='version=9p2000.L'}, {@loose='loose'}]}})
getpeername$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0)

[  352.948576] audit: type=1800 audit(1590667036.843:378): pid=15994 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16409 res=0
11:57:17 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'ipvlan0\x00', 0x8000})
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r0, &(0x7f00000007c0), 0x0, 0x10040, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x4)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r6)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7)
preadv(r1, &(0x7f0000000200), 0x0, 0x400)

11:57:17 executing program 4:
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x2ab3}, 0xffffffffffffffa7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000480)={0x0, 0x80000, <r4=>0xffffffffffffffff})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0xb8, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x1100}, @fd, @fd}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @increfs_done, @increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/234, 0xea, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000580)={0x0, 0x28, 0x40}}, 0x400}], 0x12, 0x0, &(0x7f0000000680)="f6b4956420d48c7d3fe2faf6f3165aaea8cf"})
lseek(r1, 0x7ffffc, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x8)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="730eff8816dceadfd50fe5bb911fcb070a4925b430f1ee465093d2b18805353069063143cb0a0ca8d82044064fcb55d17c43678793f1480141c47ba3b53b42212e501228f95353e1545f371ed07faa67d385afe64a6ee1e8feb2e9a327d8ea15d9bf443c912ff47961d10d30b3de85cc5b7bc5ca172d404fdf70aa573bff2bda0590"])
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x220000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r6})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, 0x0})

[  353.114274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  353.223313] audit: type=1800 audit(1590667037.113:379): pid=16067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=16417 res=0
[  353.281372] audit: type=1800 audit(1590667037.153:380): pid=16068 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16416 res=0
11:57:17 executing program 0:
prlimit64(0x0, 0xa, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x4, 0x0, 0x20}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x1, 'lo\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}], 0x1c)

11:57:17 executing program 4:
socket$unix(0x1, 0x0, 0x0)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480)="f900ec821f3674f3a13b8ac16f1476fe845d375fd0c18d0dde76812ba6a345a28c0c80034890714e1cad8260321ef1a7d27921730ad9a3b410367b0acae841d5f8714209c97887b4b4a5a1617eb37d9fa32063d8cf0bca4d32a44b89bd775ba29c6cc93146c991d7850ee7b29365cacc2424176e9cad41cd75aa8f4f8c0d89d8ecd84fa2fe8f981ddd07fae3924eab6e78aed4a13ea82a3c215feffbc270dc5f737109423909fa2a2e75f2b2cfb510a91d03c6fb35d0cc045dd2a6923a29588b9f4ada1cb6c2561b4daac4f67f89e68eadfd7248ea287a51ca37b27b", &(0x7f0000000680)="1eb06210d8efcf656250bdad834048cb000a02dd5d402de35a38b7bb596bb1438e9f3410f786c89285ec3dc5f43069499751de72c21ad19bfa555e1cf0eb266b1314d4fa6081b267db71b5dd0d4287dfc30125f1354aad160eabec5be1fa8696df7e3454673bccdda6c4e85536b62a45f31e71522b56e95e81f83fa41e226c134679ca39bed145837f681193e025032e6ace893d6e57b1c087ac8b50715fc4350e07f02a4cca8be8393d475b8beff8bff286c9756d837b1b1790c1a151a060070945f0ce61189c411304a73aeabefbd47356024263da72715439491d7636e922af", 0x2}, 0x20)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0)

11:57:17 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESHEX], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c5}, 0x40081)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)={0x0, 0x6, 0x4, 0x400000, 0x80, {0x0, 0xea60}, {0x4, 0x0, 0x80, 0x7, 0x4, 0x4, "c29077f4"}, 0x80000001, 0x4, @offset=0xffffffff, 0x3f, 0x0, <r4=>r3})
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000180)=0x1ff, 0x4)

11:57:17 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301})
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x452001, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={0x0, <r4=>0x0, 0x7})
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={r4, 0x0, r5})

[  353.571275] audit: type=1800 audit(1590667037.463:381): pid=16092 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16419 res=0
[  353.643023] vivid-003: reconnect
[  353.648258] vivid-003: disconnect
[  353.652593] vivid-003: reconnect
11:57:17 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000000)=""/187)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:17 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x0, 0x1, 0x20, 0x2}, {0x7, 0x28, 0x0, 0x3}, {0xfff7, 0x6d, 0x20, 0x4}, {0x0, 0x0, 0x0, 0x73b}, {0x3, 0x0, 0x49, 0xfffffffc}, {0x6, 0x8, 0x3f, 0x3}, {0x0, 0x2, 0x6, 0x1f}, {0x3, 0x2, 0x9, 0x2}, {0x5, 0x1f, 0x7f, 0x9}]})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0x0, 0x0, 0x98, 0x90, 0x198, 0x190, 0x198, 0x198, 0x190, 0x198, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1\x00', {}, {}, 0x32}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7, 0x6, 0xffffffff, 'syz0\x00', 'syz0\x00', {0x8}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)

[  353.845015] audit: type=1800 audit(1590667037.733:382): pid=16104 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16420 res=0
11:57:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
fstatfs(r1, &(0x7f0000000280)=""/24)

11:57:17 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01011810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:17 executing program 4:
socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f00000000c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000780)=""/48, 0x30}, 0x2123)
r0 = socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x120000, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800018029860b3ef45476e53aa232002f0180c200000100423208514ef10f2e1a9106", @ANYRES32=r1, @ANYBLOB="0100000000bea189bf4cbb7f60080000005c2bc9251ba2"])
getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000080)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x40192, 0x2, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe43)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108043380ecdb4cb92e08480e000d000000e8bd6efb250309000e000100240448ff050005001236", 0x2e}], 0x1}, 0x0)

11:57:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x80000000004)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
write(r0, &(0x7f000058bfe4)="29000000150003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0xb54d, 0x1d5, 0x9, 0x3, 0x80000000, 0x5, 0x6000, 0x2810]})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0x3, 0x2, 0x7})

[  354.169567] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:18 executing program 0:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0xbe1a6f94048d391d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x40000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_SET(r2, 0x7002, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000280)={0x6, 0x0, 0x1, 0x75242b35, 0x9, 0x401})
dup(r1)
readv(r0, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/4096, 0xa00}], 0x1)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000000)={0xcf4, 0x1700, "b9776d30a9843ee07ed29c69980514154ea6677ae1b6311b", {0x0, 0x67854f67}, 0x1})
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

[  354.269382] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.278367] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.288758] device bridge0 entered promiscuous mode
11:57:18 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000340)="2e0f0052b72e0f35bad104b075ee660f388288ef003e0f0199524a0f1f33f30f01ea66b91403000066b8f4ffffff66ba000000000f30f72dbaf80c66b86e5e658a66efbafc0ced", 0x47}], 0x1, 0x20, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:18 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0100ffff6ad78cf90600252922a6d6717d7eba5ce8c55ed82517ab3d63808a0b1503b275569ddb96c535edd032ea0b2b25d6ae030649278da49618560f56456362f4a223c22139ab58eb85d2e20d5eb394b676e0fcf6eb3aaa6a0974f284102bf6", @ANYRES16=r3, @ANYBLOB="20002abd7000fcdbdf25040000000900010073797a31000000000500040001000000050004000100000005000400020000000900010073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x40010)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000001c0))
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
io_setup(0xa, &(0x7f0000000000)=<r5=>0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000480)={0x809, 0x7, 0x0, 0x1}, 0x8)
dup3(r1, r0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x3ff, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "64e4e92b"}, 0x0, 0x0, @userptr})
io_submit(r5, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}])

11:57:18 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)

11:57:18 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x42000, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000)
r2 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:18 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018ff070000000000007180fe22d71bd5664b044a7141f52828c7fc34a53245999e36d30cbc388cb0f554daa26f71769f6340209d02ce01e5"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:18 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x800)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='{\x02')
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0xd2001, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'nr0\x00'}}}}, ["", "", "", ""]}, 0x2c}}, 0xc000)
r9 = dup(r0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000080)="b8bcc607db0ece22193c47825a4d719fb61caca5875765d8508d7efda06478c0fe4f7eded127986fd6e8080406035e422619f213acf5b8feb44bf0fb47e974cf88817372eb850d217647db0c239ad600ae47bc9237fd7d18f257c8b1c59a5492f08a0c3ed1d1452c49e63f6dd1be27861c592116c3e4a7d818f2d958881a30422b0cbccdf1046297c8ad285623d98ad91d", 0x91, 0x8090, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @default]}, 0x40)
getsockopt$bt_BT_DEFER_SETUP(r9, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:18 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/198)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:18 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100c5000009dd778d495254001bff0000"], 0x0, 0x80}, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  354.973692] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'.
[  355.002837] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.009430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.016180] bridge0: port 1(bridge_slave_0) entered blocking state
11:57:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002804572ee4da6d478f72d5fadbb5532403de7c532ce707ba0eb67f08fe3d17d905a50fb9d27c1b7e0f5a3a79b994cceba1f47042dcef389bbee05f0"], 0x34}}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)

[  355.022669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.064073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  355.076178] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.082782] bridge0: port 1(bridge_slave_0) entered disabled state
11:57:19 executing program 4:
socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f00000000c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000780)=""/48, 0x30}, 0x2123)
r0 = socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x120000, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800018029860b3ef45476e53aa232002f0180c200000100423208514ef10f2e1a9106", @ANYRES32=r1, @ANYBLOB="0100000000bea189bf4cbb7f60080000005c2bc9251ba2"])
getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000080)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x40192, 0x2, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe43)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108043380ecdb4cb92e08480e000d000000e8bd6efb250309000e000100240448ff050005001236", 0x2e}], 0x1}, 0x0)

11:57:19 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6eeb1700"], 0x0, 0x80}, 0x20)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000831000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000340)="48b813000000000000000f23c00f21f83500000e000f23f8440f38f6a3c500000065f3640f2156400fbaf9f4f344022c1148b8d0484fbe000000000f23c00f21f83503000d000f23f866baf80cb870d2748cef66bafc0cedc4e1b1ed9bc7aa5b5565400fc7b1d4000000c403a17c4168e7", 0x71}], 0x1, 0x44, &(0x7f00000002c0)=[@cr4={0x1, 0x4020}, @cr0={0x0, 0x20010002}], 0x2)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8080, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  355.232047] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'.
[  355.246674] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.253090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.259898] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.266494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.275226] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
11:57:19 executing program 3:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
r2 = open(0x0, 0x200, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0)
ftruncate(r0, 0x48280)
syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x0, 0x0, 0x22080, &(0x7f00000003c0)=ANY=[@ANYBLOB="646101000010000000000073726f6f743d212c756964919c6a162d3229fe3a1d993ae20200000000000000bc5bec58dafb74329babd37f143f34113e23da919ee6e99eb9674064aed591ad0e83da8d4bed", @ANYRESDEC=0x0, @ANYBLOB=',apprais'])
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000500))
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @sliced={0x0, [0x1, 0x8, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x9, 0x81, 0xbe, 0x0, 0x3ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0xbac3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x6, 0x8, 0x9, 0x0, 0x0, 0xf2f]}})
r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100000, r3})
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x13}}, 0x24)

11:57:19 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0)
r0 = semget$private(0x0, 0x1, 0x0)
semctl$SETALL(r0, 0x0, 0x11, 0x0)
semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000280)=""/4096)
semop(r0, &(0x7f0000000040), 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008", @ANYRES32, @ANYBLOB="534fce983e5c2d7673b4958005e750e907d4fdc7bf13d088ad203bd736a916945b0f66f933a31733392547e20febfc8d209cbf74cde243bf2406fae4ddbe02d390fffad64b01"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
dup(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000100))

[  355.328326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  355.391862] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.398802] bridge0: port 1(bridge_slave_0) entered disabled state
11:57:19 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000800)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672cee", 0x83}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b72", 0x46}], 0x2}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)

[  355.447475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  355.637516] device vxlan0 entered promiscuous mode
11:57:19 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$setown(r0, 0x8, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0xee00)
r4 = getuid()
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000940)=[{&(0x7f0000000380)="311c96d51eb88be5f9c8996483136855d2b9adaa2dc56c747482495bd08fb2a89e08d220599e776eda33a07ff005e30cbe7ae79e73b203407b1008946f69a387cba16e189fd921ad8c2231ea107a7a0709b38d1c629b4c14c98899e096277ff70559c2dbc263569cbaf8c3f370d8c7bcd139c94a530d0745bcc2f055ac35d9782d7567bd8154dc2e544505606a53d7d11184d4b6a64415769789f608c8db8d3501694c26280b06256a77279a2836c5174b01a111ba88cfe92056a0a6f6d520916afbd24674009aad709493af050fa5b47cd3343de792aeae96bfab958acb9b34446e9c8cf11d0a6d2c032da42ea59b918598a42a282196", 0xf7, 0xffffffff}, {&(0x7f0000000480)="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", 0xfc, 0x3e3}, {&(0x7f0000000140)="ad19131a725b5185ccda443cfe45ac0b3eb20f0c", 0x14, 0x73}, {&(0x7f00000002c0)="72d2bbaef91acbc72237bba0133ff2d857bc6d2a8e4744a826cb6028a3ea90ea4f2d774c6ab78e31f801ad9d5d3ed4250383aaa36bd8752394115c6128d4997e14", 0x41, 0x100}, {&(0x7f0000000580)="d5eda43555b00f7e05aa4a0b791566cae0b23a5e64adb56261edeec46d51ec7ccb0dce56b1c03c4c0c89ce31291c91706b16d5cd66f3ec42f75164898cccd368e072ae3386642fa0a470230dd3bc0ef0f9919c96c52e20245a1bbaa929e898a047901e7024aeab36c3a5a0e6a5cf9608d567258938b74cee4635419e554211ba7049f0e7f31c95bdc841c34de6f6bcfaaff6d5843cdcdb535d07095c5311553298f3ac819c0ab652b3fdce70b4c16830711737d51783734646b9ae47a2bc2a1674219f89aac72904816a45b8c66151edd3f0e581dc7fc9", 0xd7, 0x1}, {&(0x7f0000000740)="d7cb67f2ad3b8fba1371c303eab6a948d08a20aa0dfc6ac60deb67912aaae9b52e2642b9ceca49c7670c3f0005d9e8c6edd79903622f719727aab115f30b1a367922a7bdd9356f510a61ebd76d37f21b4e119728e34cd5f1ade195ca8678b0cc15fb6822197ec319ea3058aebf3c8c50396c3a5d1ab41540fd65762d9fdda20fea198c4f232af289199f39ebe78ca5a0d099b1225b4139bdb7f48ae4c62908ad972612015f00d6a08defc6ae90246144a87b5ff04338b5f774f1174c7c9fc5b0705792ecf829e2fde159530e6dfe841b90297fcf4d10dac6c71637d7b2495a86be572886e832a0b1ed", 0xe9, 0x6}, {&(0x7f00000001c0)="54a2f5d74005782379f4", 0xa, 0x100}, {&(0x7f0000000840)="eee09b3424d6ac14ac06cebf70bcb32ce7eda637599e281edc17052804995557faef4afbb073192a19a137cff0849b49f82f570bbc9a23ba391bd1a10bfea978ac435408c95494d53f5d38b44001da4a4aa8691fbf7e82ae568ffb69ea1cfbaff566b772d875588400a3fb9b44dd715c90f6b3fcd8846c5a672ec77913280e59df936f6425be0210c03918f308dacbccc6ae88d7a7eb7a8c27b055dd911c9ba680790c017609c47e5816f046991d033ce7cec6f4c2e384412a381df135ad89ed0e23", 0xc2, 0x80000001}], 0x200000, &(0x7f0000000a00)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x35, 0x30]}}, {@huge_never={'huge=never', 0x3d, '\xbf-eth0vmnet1'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x65, 0x36, 0x0, 0x36, 0x34, 0x34, 0x31]}}, {@huge_always={'huge=always'}}, {@huge_never={'huge=never', 0x3d, '+eth1(()eth0bdev//\xe8$:eth1'}}, {@huge_never={'huge=never', 0x3d, '[/@(vboxnet1'}}], [{@subj_role={'subj_role', 0x3d, 'msdos\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x33, 0x62, 0x62, 0x61, 0x35, 0x57, 0x37], 0x2d, [0x34, 0x64, 0x35, 0x31], 0x2d, [0x0, 0x30, 0x0, 0x65], 0x2d, [0x34, 0x62, 0x36], 0x2d, [0x33, 0x65, 0x37, 0x39, 0x36, 0x66, 0x39, 0x36]}}}, {@dont_hash='dont_hash'}, {@uid_lt={'uid<', r3}}, {@obj_role={'obj_role', 0x3d, 'msdos\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_gt={'euid>', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.cpuset,user'}}, {@smackfsdef={'smackfsdef', 0x3d, ']@'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}]})
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r5, 0x1000)
lseek(r5, 0x0, 0x2)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)

[  355.658347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
11:57:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
sendmmsg(r1, &(0x7f0000000040), 0x0, 0x0)

11:57:19 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002ff000000000c000780080006400000000005000400000000000900020073797a3000000000050005000a002100050001000600000014000300686173683a69702c7015ea742c797000"], 0x58}}, 0x0)

11:57:19 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r3 = socket(0x23, 0x2, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14)
memfd_create(&(0x7f0000000080)='%{]+wlan0vmnet1\x00', 0x3)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x7b, 0x10}, 0xc)

11:57:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xffffffff}, 0xb)

11:57:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
write$cgroup_pid(r4, &(0x7f0000000080)=r0, 0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:57:19 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xffffffff}, 0xb)

11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xffffffff}, 0xb)

11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xffffffff}, 0xb)

11:57:20 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb25998043e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000001)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xffffffff}, 0xb)

11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)
write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xffffffff}, 0xb)

11:57:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x7fff, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
sendto$inet6(r2, &(0x7f0000000300)="0503c80006023e0001c480a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0xfffffffffffffffc, 0x80, 0x8000, 0x2})
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0)

11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)

11:57:20 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)

11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)

11:57:20 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='i\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04000bbd7000f7dbdf25010000000000000009410000004c0018000000b5696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24000800)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x6c, 0x0, &(0x7f0000000480)=[@dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x0, 0x0, 0x38}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/231, 0xe7, 0x2, 0x31}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x2}], 0x35, 0x0, &(0x7f0000000500)="ca90d07aaf1ae5f6993179f6b000b297a6926a8deedf10a342c7ef92312048cef5d8e24bd0beab0e0d91a63294506f41f1104bfac9"})
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x20)

11:57:20 executing program 3:
r0 = getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000a200)={<r2=>0x0, @remote, @initdev}, &(0x7f000000a240)=0xc)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ae40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000ae00)={&(0x7f000000a280)={0xb74, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8688}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xf82}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x5, 0x6, 0x4, 0x7f}, {0x1, 0xff, 0x2, 0x81000000}, {0x40, 0x0, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x7fffffff}, {0x1ff, 0x20, 0x1, 0x10000}, {0x0, 0x20, 0x3, 0x9}, {0x4, 0x4, 0x81}, {0x6, 0x80, 0x9, 0x9}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x8, 0xd3, 0x81, 0x6a91}, {0x4, 0x1, 0x3f, 0x100}, {0x7, 0x1f, 0x81, 0xffff8001}, {0x4, 0x6, 0x1, 0xff}, {0x8, 0x7, 0x3, 0x7fffffff}, {0x1, 0x0, 0x5, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xca}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x2, 0x20, 0x1, 0x4}, {0x32, 0x40, 0xff, 0x1}, {0x200, 0x6, 0x4, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4ab}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0xb74}, 0x1, 0x0, 0x0, 0x2044050}, 0x80)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00')
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
preadv(r5, &(0x7f0000000500), 0x37d, 0x0)

[  356.798844] kauditd_printk_skb: 12 callbacks suppressed
[  356.798853] audit: type=1800 audit(1590667040.693:395): pid=16325 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16427 res=0
11:57:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)

11:57:20 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)

[  356.995942] audit: type=1800 audit(1590667040.883:396): pid=16391 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16418 res=0
11:57:20 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
close(0xffffffffffffffff)
shmget(0xffffffffffffffff, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x3d1)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78)
shmdt(0x0)
r2 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x3)
semget$private(0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974792e75731295"], 0x0, 0x0, 0x1)
socket$unix(0x1, 0x1, 0x0)

11:57:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)

11:57:21 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x448002, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/214, 0xd6)

11:57:21 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="8e0a051179660565b849f1d764f3703642f9381724d37dc5942423c4a11ee37774e34e63e8ec7b6890d86ef930247fe42daffdf97eb6167f17e06cc442c9354e72948ab248c3a12e5e8b9a1cd464cddefbb730fbbada7eabe31c062eddd3dbed4a5b1d1e0650a4403dbbb9fdecea79cf3081c69abe391e90c847d1a7450066f927d7514c3a6c055119ee99090237711679c9ce1158501d857e143719950b5c61e8a8645e52eabd"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x2aa9, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x39c0f000)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:21 executing program 4:
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
clock_adjtime(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x86084, &(0x7f0000000340)=ANY=[@ANYBLOB='loweddir=./bus,workdir=./file&,upperdir=./file0', @ANYRESOCT=r0, @ANYRES16])
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file1\x00')
getdents(r1, &(0x7f0000001440)=""/177, 0xb1)

11:57:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:21 executing program 5:
r0 = getpid()
ptrace$cont(0x7, r0, 0x9, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x12)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000000)={0x3f})
writev(r1, &(0x7f0000000040), 0x0)

11:57:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0xd8)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x10)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
r8 = open(&(0x7f0000000140)='./bus\x00', 0x800002, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00))
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbe, 0x0, &(0x7f00000002c0)="3e1d9971c42a0f933a62110890a23e21bed6781dfdb42f2472c73b04a1f58333a9504016208e6a01a1511511966bb20d41b00e43f30de7cb9f2c29e9078ee0dfdc13d80d75841680670307436a6c4c6e66804daedb5bf17450feae4986d6dc4fc4d05ee2cc2b3f4c21a6f6bb09f91dd1d881da137057d9d4bd49febf4701d97fdd3c46871c77ec088f838b610d61b5f7cd005d38a44d2ec1c3ca30ee47c620ad35f94564062450ade165c664f0243facf1d862beed11b0c1080f41ed3fea", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendfile(r5, r9, 0x0, 0x8400fffffffb)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  357.552348] audit: type=1800 audit(1590667041.443:397): pid=16439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16436 res=0
[  357.598341] audit: type=1804 audit(1590667041.473:398): pid=16444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/206/bus" dev="sda1" ino=16438 res=1
11:57:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000040)}, 0x20)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2}, 0x0)
getpgid(r1)
socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xb8a3c8ffa8b92f1b)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f00000000c0)=@rose)

11:57:21 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x930, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1)

[  357.736047] audit: type=1800 audit(1590667041.623:399): pid=16397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16418 res=0
11:57:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:21 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x2}}, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000080)={{0x1, 0x0, @descriptor="114579de7b97a50f"}})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x2bcf)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x80000)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
shutdown(r2, 0x1)
recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4097, 0x1001}], 0x1, 0x0, 0x0, 0x7115}, 0x102)

11:57:21 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

[  358.043665] audit: type=1800 audit(1590667041.933:400): pid=16478 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16432 res=0
11:57:22 executing program 0:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:22 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:22 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  358.285206] audit: type=1800 audit(1590667042.173:401): pid=16500 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16436 res=0
[  358.364815] audit: type=1804 audit(1590667042.203:402): pid=16503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/206/bus" dev="sda1" ino=16438 res=1
11:57:22 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x111800)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x92})

11:57:22 executing program 0:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:22 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000001180), &(0x7f0000000400)}, 0x20)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:22 executing program 3:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@mcast2}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x59, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000206030000706f727400000000da6c8dde05000400000000000900020073797a00000500050002000000050000000000"], 0x50}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x8000)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0x1f, 0xc, 0x4, 0xe000, 0x9, {0x77359400}, {0x4, 0xc, 0x9b, 0x3, 0x0, 0x10, "9da0873b"}, 0x7, 0x2, @fd, 0x0, 0x0, <r2=>r1})
getsockname$unix(r2, &(0x7f0000000440), &(0x7f0000000100)=0x6e)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r3, 0x48280)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)

[  358.452617] audit: type=1804 audit(1590667042.203:403): pid=16503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/206/bus" dev="sda1" ino=16438 res=1
[  358.487852] audit: type=1804 audit(1590667042.203:404): pid=16505 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/206/bus" dev="sda1" ino=16438 res=1
11:57:22 executing program 0:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:22 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
write(r2, &(0x7f0000000300)="f13feab98dfb1b90921035a10cbd63e7971c822d30b19cf0e0982373b25c8bd271b7c66fcf6b9c16f32fac7c841e83dcc426696cd8c809177827b736ff6c44854e1ffcdb48d3e58757af3d4ffef39f99df88d18e531ee37966a70493c0f55d9ac5bd877988a67c046903b3c979d4e04367", 0x71)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000180)={0x0, 0x7fff, 0x8d4e, <r4=>r2, 0x0, &(0x7f0000000140)={0x9909d5, 0x0, [], @string=&(0x7f0000000100)=0xc0}})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x68, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}}, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
fcntl$addseals(r1, 0x409, 0x6)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000440)={0x0, 0x1, {0x36, 0x1c, 0x6, 0xb, 0x8, 0x4, 0x4, 0x126, 0x1}})

11:57:22 executing program 4:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040), 0x4)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='cifs\x00', 0x0, 0x0)

11:57:22 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:22 executing program 3:
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x1000, 0xffffff80, 0x8, "218ea9ead29e0f0ed7c66002669f30a8e2516668ad214f630d24af6ba419256d44c97844d4bae33fc5cc19cdeec5c5f3e17f1ccaff65236a02e178d134b539099731b645642449721cbef4e2464c76482e3cf67eba6296ef80de35596bfe4b6ce337f7780f6ffa435298d87e0490da0979ad67a692e9056ab19387a001ef7b96c098e1e0161cb14b0e2f988392d273a61c1ae16bc1a6b97f647855d697a24f6fb13e093780e84b7505354f8d967112b2947862c9d81a2b8db71e16d8c8bdc72527230cc6107fb5c60656d52de9efe35a72054c5e8721800c113fa178955b73bec89cd52b75ce6deeeb9a4ef0a385be113148ae9c276a3de9cee92ab77c2bec0500184ae88b40feda4d0b7c2bb246038e495ce920f7a9ee6070004e5939ba4f184f180fc87310c939e10dfdade764613f09aedc9ce8e536fe701b5de030973af922bcd2ba870fc4affb1f76c6c1a2e5e54ae105ab68d4a707b0f631b548d9a2ff4f58b191dcd9d524f56058fdf321949c61154ed2751f23f527b5e34f2b40ad5cb358eed8f38ae46ce1e26a779ce30d9d06d4676cdc5c70accac314d21ec8bd20ad15168ad1edb7142e0b98d61fbe6e14ead883017b7eadb094f7bebb9739680ac7313a0d9d13f7c0c582da945255fc0e3e8c82e8928b14e490861d4c849ef453d779c2250474abb957319ba55547b4736d7e43093601e51a1bb98d79c85d66b23b11943f77ef633f0d7d6d20fa537ed6bd966107894a8074a5427a65af1cab9d15b6f656b6f7a7087a66bb51c0c384ebb96fdcd894a69378bf869f030e95c1b41efa43edac7cdbfea6c9a91b7c85adcbee1f329574a9b23aa120f4bde32d160674f4ccd84a78e37ecd11f8985478818450b5c05eb32c3de349a4cbfc16188fd965d95a238d585fe8c14083d214f1348fdbd023ed3e16f4e64e5ab49e2cd5eca5cfbc19cb9126ce8d6abfa65b1e9511ec5ca393d0ed68dc38f3646503d56b2b524be251937176c100496c75c34b7243e1b82ed8cdf6a37da8544d22db84ceecbda7206d980544d62213280aaf1ff845106eb9e484ccbef41031ac073347a4b765b177b5c4f18276ea506a4723ebda0ffa2b9dda6c59a37d1a5d245536dec178a6faca5d71863e1186ca7a6f635493761da261147d783704b9481cdf50ac33824d888f9b52a602947f120e764388cca7f2fdcc976b57e966a9e8d0802646698baee33907bdd67284ff461d4ca603e7bc60635e14c48138d8537f1b6b3253a490d19c607e346e7c651ff14651b3617757988842764208c456cf041e21b4694eea564cad8baafd02c6ef05c520754111bb3687d46881a0382d7f839c75ee34c09460440e3570aac38cd1984b61582569078c679ab4c6b2956be9b52dbba103f9cef739a606cb57db0f5f8bbec4bebe916cf2910e8d49f576f0a1e628fb2878dc18f2268544b67184d2221bca8327f1b6b8a13e347830429f330be10f26df5d53e5d62c66aa787f5163429c37b9a88cdad0b7327cb3effd9b22a10de8c7f40248e64e96658719f223f15beae3c1349860a6f0cbcc98d1548b1db0399f883ea0ef7ee204910b0e5bbb29742756f17b79c54049444540900856e62941c082fbc3af84d11659b4cbbb294153b93b6c2bf6d8904a40793812da02f425a591495f48222c7692cb2f23bfe4c2fd99ad3a9e39161ad8767e43ff54af3d6710fa8304a257182f2a53adb2f983b7fa907c35c966b644e515056de89ce7a7d67563487770b4436d66c2bd411f127d2d2a39ffd0923889aac75c9444e24cc25eb9405df094ab373baeaada1e70c4035a608c8419bd89c97596ba55321e4dbcc68681cd58921c09048490c7eaa7039f7c7757d27251a0349d050533a11bfdfab790bf133e76789777d89f15b933d4be36ca1798e6ec485955087be954d7e6332308f21609d84fc6576780908a53ca766d1b81c37319afeaa97fdffd65b2d8d686987c8dd03cf26b3a14a1b7c7cf19dcb1a4b124d68e39cd27322bd72d02c0e2896f988b185e782519dadbccdf156f8207341bd4d22bf01529422a37870d258dabcd1ad38108c5c5fd117e3b1972d8ae83845ca186eb5eb77b8d3e172fead2d63616fbae886ef787e1459439dc640207991cc717a9efc84dcbafdd04c60576e1814c4ced681e7c8fd55752079247a93bc723dab59f024fe1be10162c7a579d4387f7d57ab8da52e90d83cb2afff6aa1f5412e8d9f3c29aa8719f38577a7f12ed55a933f8d66c20976e440cd18a7c2b5c8676547ed2d0e26a298665e90a2f2476a45fc53f10c3053a7fda4c315bd8aa084fed8b1908c091f1058ce0b1d22987d5587c426020c6ff86160f2a577cb7151b72be522519aa0caa9db7c791b562f2bbe9996ca5271e7588648dba44c950f41ccc6d31cd24790569f0e572ad206a3220bba6bc5a74c1aad21aba4e399242369ab401be954d46480e0943520f446f5902f044075864367030ced5420ad3582b2690728226a460fe41c85a7ea713de5928ac2a652660cc1b3ee097df00c4aac8737b2f87ea277f385505539a525b4185104cc2a6de58f61a7f0c11bdc926fe0f98d4042c9fe16f1f37ff12f1b3c7e79d8094b85a604aa705070e335d7a768cfd40178ea8038a0ef5ca5fcbd950b3d63e8916c6d445127d071e19d4618459ce337fd630e4dffd9a8c7ad13a2f7e4fa895708fd1bbe4ab24c996769554cb58d6c8034daf4eb4b2c1fb9d8b1c43cb7379b1cdab32d2909b914283823ccc81c589202985003153916f77cb90df770e1baf841725be833aa6743f5dd07076fc01ebe1a03c3c69307424ab5352fab7b4eb6b18bd33318e8ed23fb18222abfa19de5e4c0aa7a168dde79e039762f9ac6f0c943bb49529fe9b851d86171ba3265ebc8261615cc8fe375250e245810acf670ee9387341950309f3ec443667848fb4c433f00895a8632dcab6ae950d4a29edb3f9d446afd0b2b40dd8f7007d934ccd18caef369d5bd0044f13f5d0b7eb382380ed6e7f8d637b1122079dca22b2d26c985c1206acf17b7348615ec52e3000dcdcf712bb76acab9cb950839afe9c652f74fac7ea8277aaaea645cc3b35aeedce4b6bc31dad81a82520d2596ae297edcd479fd6374400b0a4607dfc6b09e726d6b1e9ffc4884b40421796aaf7a5dc11d2e6c5b8d404b1d88bfa376645e9b122482688c1391c7e9d8af774aac2637c52346b00868b7b8556a739dee94f39ea3caf7cd11a35a4134790fc5c2667241d3d76c001b10721c7f622148a8676fd8e5147c9eea21c07182373f9fc23fdffcf4361aa4484ed75002b504f3bfa4e79b994d4231e36e14c9c01c7633ae67c6a4f55fd45df1f65b831f657150c1abf5bfc3a5fac72f29b61038230d16b52d56897ecfcce4960e9ae144ea2905b5ca31ebc052dad1d6d5ec852d0d36a62e06ad7ecf927daeb90e6bfa24c8c0cd88883adef4f2c17127b5ca2ddd7f556ab4ddb6e9229635b48acdbac56853233169db835bbe8a1a48628edfe1846c321679b15406a6c7fa5e468d6f56c2a3edca4117b31d55b617b7b3648a5c09583b0c4cedcda3d7c7a1fee8c0ee96b334f4bf21136dea647c5ae1cce31be4d16f2397c626c8c066b02399cfa9f36d567d9ff7328b7479b2b59254518d6c6a5019d9654e757e7738b5232aa8fde5971489798a44f75f7b6832eccc301b71e048ffd9001bd1dfa74d373326f28dd83b579e86666d1497517bf62918093b58eb6cd7c759b233662825af7e20dd34f64603bd480b4b0d3e037fefae606bda27fb11e418fd592c327ad71ca619e2602072c7f9a8a18f8edb500d9ac20ae313fb67257596503d90517f9bc68f7064919b873e227094b7c04c7a7b6aa51c9c7393f2768a839d0e0bf6b082781fdb78cd5df798c8e24802dca4540464877b8a0de83a009e38f603e0f189605d05c4366b8c0506e3bc97cff038bc80cc7e5e30c399091905321a55df3cecb748f64845412326ff2777035e86c53b2dd1deb396183eb77187e6faa6bcd94596e121fde191d879e31fcd4fd99d10809bbb1daf3e3ab5df6fb3f0b4367b3f249ebef2f524f7d3d75abc9db7a51f707372450444ca5ccf0ca4575458ccef667b38d80634388b57c85d9e107fc1220c4b3c923e6852ada6787d334d0a4b1b0a32399a83e6af332a2aa026e7c89240c7dbc8194e89780739e08f3e3d47195633d0afe1e8c4014e971adca6d667fc23401515968dae9a2aa1c3ba3b3935b21e59bb3a384f3b2b3764e8ecaf9039674fe7b7035d59e6b165528af4df6f105ea04b63f682033079f5f81cf2d15bc17e3ecff68c31ce2d8a008969746c5e717586e96b42b670f92beb99015c4c469be5e93afb66c19168d72522a783213df0b4b28d7bf328202530f57ef15b6f52281269ca3f0bbe98e5526bfde1c22e1c0a2d9740e8483dba06602cc17904547321d794559390e990bfd840dca5467e5453ee6ddfd73395dec3eecdca257a345e96d441592920db3c57b194f5b7e226f35ef53f9935006fbcd7564834cb01e6cd92019a8662752656b4022113631a7926f3aa61e80502fb4041074032918f0594aa6bb0a7afd6d909f1ff5a3a03e2a3f0889b525b65c493c76ad38060b570f2468442f011c9aae898ab05432286cd059ce96599caced3a9774c56d1d81a749d70fe9f3a0048fec89cf644756d1d8299219961cfae6bcd0ba232cf1587c78bf4f11641b1f154c5e7d31d7cbfee1f8bdfe944a7ec99bd7386ad0a26251cbb70757930cd691691e08a93ba23293f7f9f9455560913e33a8c0182cf40ee7104c58ec5ebfa6653c1a4c69beada0925ea8e467ec90104811cec9731d5f0fb77cbccbd71a2eaa3a90da9024964ec1d753bad613f0543ad86e01a52c92df99a0ee8d7af76dcfc05c024f02e0efb121c17a48f02aaf40d30bf1511681b8bbbd5f87e2fa830cc132ae55a5a07301aadd65cd6e8d36e6189d22be087ed0d328d571297920313c1aaa7ad9807f2fc1a088a08ddf8cdfc819f4d225b542ecf47de3f6dd2ada4ce3f2a2d6582d81222ef4380b26758b1e49a44c31ab03ae78c9e44eb9039b458f11dbca1e4c3f24aaa4c6d60d931f2c52ab3249b7d3b8d0522fe44e1a8cabf1c1940849fa3ad1acd6d5e6f88a0019adf85d7e108cd0d13f3bb1da01b463240fb65c394d90a7f6c5a2f0ccfda57e56124003b72e3c1968825bfb7d6630a8226c4e264b23bfff7de7df0190b23a2fafd0aae3655682f9c25d9278a6a5b1ed0ab0f89417f1ddc82aea3382b99f77bd106f3a9a4643cfe1862ba247f17e3851c090234728862d4500ea227e3dc887b3eec740c2f29e30228e028db2ed867fbd70b477a32a2d2fb5ccbb434cec7731ef4ce9562090133ecadf7b4da42523d551ac4b65ffe2c25bfa771bae2d168f192885bc4a878a11232787e18633a2f7612417cfd5c404afc72f18934e98be87eef72edb4e19c700817b957c9a58ddcce265a3439497da34665281425a02831776865c05bf58eda4f5e77468219c43047a324af1bde2501f151cbc5a0ea0f930d38c8cb6284c7933334c77b1e9cfe225791d3ea623a51fd6438978e5b333c77b472866200198a414bf9737e8b88263e27ef1370663b7b9f6c0a0016c9935ab399dabe74f0559255625868842172791a0afc415fdcefa41ab7fe92defe94fe783dce036287db3587097fb0f7408828ef445447ec6e26e6d2d2f0bb2b399dc74c5da3a9383a5ccdd039c305af94e23e58c65be69435625e1ec168dccc06bffc5e69e1d42d7faa6d3eeb4ac"})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001040)={@empty, 0x40, 0x0, 0x3, 0x4, 0x1, 0x101}, &(0x7f0000001080)=0x20)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/hwrng\x00', 0x90080, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000002200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000021c0)={&(0x7f0000001140)={0x1054, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfb, {0xe}, [@generic="63e2c746c792df3d1e73365f9cc2ba9dac3ea6b6fd1b4b2b32e425361f06d7560085287ec5e86c89eb67b6182cfe4d", @typed={0x8, 0x19, 0x0, 0x0, @fd=r2}, @generic="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", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@loopback}]}, 0x1054}, 0x1, 0x0, 0x0, 0x4000895}, 0x40040)
syz_open_dev$usbfs(&(0x7f0000002240)='/dev/bus/usb/00#/00#\x00', 0x6, 0x440b00)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x3, 0x10)
ioctl$USBDEVFS_RESET(r1, 0x5514)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000002300)={0x3c0000, 0x2, 0x2, <r3=>0xffffffffffffffff, 0x0, &(0x7f00000022c0)={0x990a7b, 0x7, [], @p_u8=&(0x7f0000002280)=0x8}})
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000002340)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x3fbc}}, 0x30)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000002380)={0x4, 0x5}, 0x4)
openat$fb0(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/fb0\x00', 0x183400, 0x0)
r4 = getpgid(0x0)
process_vm_writev(r4, &(0x7f0000003640)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/54, 0x36}, {&(0x7f0000003440)=""/123, 0x7b}, {&(0x7f00000034c0)=""/57, 0x39}, {&(0x7f0000003500)=""/197, 0xc5}, {&(0x7f0000003600)=""/9, 0x9}], 0x6, &(0x7f0000003b80)=[{&(0x7f00000036c0)=""/22, 0x16}, {&(0x7f0000003700)=""/60, 0x3c}, {&(0x7f0000003740)=""/118, 0x76}, {&(0x7f00000037c0)=""/149, 0x95}, {&(0x7f0000003880)=""/111, 0x6f}, {&(0x7f0000003900)=""/7, 0x7}, {&(0x7f0000003940)=""/82, 0x52}, {&(0x7f00000039c0)=""/179, 0xb3}, {&(0x7f0000003a80)=""/66, 0x42}, {&(0x7f0000003b00)=""/99, 0x63}], 0xa, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003c40)='/dev/vsock\x00', 0x200801, 0x0)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000003d80)={0x3, 0x8, 0x4, 0x1, 0x7fff, {0x0, 0x2710}, {0x1, 0xc, 0x7, 0x9, 0x6, 0x3, "a5ee94c3"}, 0x4, 0x1, @offset=0x80000000, 0x0, 0x0, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003e40)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)

11:57:22 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ff46e182fecba28ef4e3", 0xa)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = dup(r0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="310000000000000000000a0000003c0003000800400000000000140002006c6f0000000000009d31f0aa0000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x85}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc081}, 0x40001)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000040))

11:57:22 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000040), &(0x7f0000000080))
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000480)={@loopback, @multicast2, 0x1, 0x3, [@loopback, @loopback, @multicast1]}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27)

11:57:23 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:23 executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32, @ANYBLOB], 0x20}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

11:57:23 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x11100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1, 0x3, 0x2000, 0x1000, &(0x7f0000824000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9f07000018f6d6a2dbc52e00849bfdb2eeaf0b092cb4a1c52128"], 0x0, 0x80}, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x10000000000}, 0xc0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  359.193529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
11:57:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

[  359.313784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
11:57:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x800})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x800, 0x2d0f)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@remote={0xfe, 0x7c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x5]}, 0x36, r2})
getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x60400d0)
openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0)
r4 = socket$unix(0x1, 0x0, 0x0)
sendto$unix(r4, 0x0, 0x0, 0x4000811, 0x0, 0xffffffffffffff4c)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x597)
sendfile(r5, r6, 0x0, 0x12000)

11:57:23 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1}}}, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040), 0x12)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000200))
r3 = dup(r1)
connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @none}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)

11:57:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:23 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20040, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140e, 0x20, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:23 executing program 3:
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0xf6c4b591a7e23343)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000180)=0x40)
r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81003)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r4}, 0x14)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r4, 0x8}, 0x8)
sendfile(r0, r3, 0x0, 0x102000004)

[  359.909735] ip_tables: iptables: counters copy to user failed while replacing table
11:57:23 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
write$binfmt_aout(r1, 0x0, 0xfffffd2d)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@default, @null, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
mkdir(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2a2)
mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000001c0)=0x10000)
creat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
fchdir(0xffffffffffffffff)

11:57:23 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000662aeb8b0f170a7f49c1b095a772234401b638b0304e88108d9f83212dd1a6f662"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:23 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_mount_image$hfsplus(&(0x7f00000004c0)='hfsplus\x00', &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x210, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x80)

11:57:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:23 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, r2)

11:57:23 executing program 3:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, &(0x7f0000000180)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]})

[  359.977782] ip_tables: iptables: counters copy to user failed while replacing table
[  360.076438] hfsplus: unable to find HFS+ superblock
11:57:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:24 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl(r3, 0x80000001, &(0x7f0000000000)="313ee84d1b6e334ee6c5bd2e521418b0002a73c5020df255")
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  360.103899] SELinux:  duplicate or incompatible mount options
[  360.119930] SELinux:  duplicate or incompatible mount options
11:57:24 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, r2)

11:57:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:24 executing program 4:
connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x5b5582)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0xffffffff, 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x401, @loopback, 0x3}}}, &(0x7f0000000180)=0x84)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x2040, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xa579c2bbb6d482cc, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$TUNSETOWNER(r2, 0x400454cc, r3)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000340)=0x10001)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={<r4=>r1, 0x5, 0x3, [0x101, 0x1, 0x1]}, &(0x7f00000003c0)=0xe)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000400)={r4, 0x7, 0x10}, &(0x7f0000000440)=0xc)
r5 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0xfffffffffffffffc)
keyctl$get_security(0x11, r5, &(0x7f0000000540)=""/4096, 0x1000)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vga_arbiter\x00', 0x109102, 0x0)
bind$tipc(r6, &(0x7f0000001580)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x1}}, 0x10)
setitimer(0x0, &(0x7f00000015c0)={{0x77359400}, {0x0, 0xea60}}, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5)
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vsock\x00', 0x101200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000001640)=0x1)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/autofs\x00', 0x80, 0x0)
bind$bt_sco(r8, &(0x7f00000016c0)={0x1f, @fixed={[], 0x12}}, 0x8)

11:57:24 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:24 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001f9)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, 0x1c)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r5, 0x80006)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r6, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r6, 0x0, 0xfffffecc)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x3, 0xf3, &(0x7f0000000140)="a43b8411a3f1b3afe8706408e2fb5ba6064798ba69c1117dcbe0c898339955f57b2a97b0d52f0dbb75c2c8eb494a747d6485d60451cf7b6e856491f207111c36a680981de5924b4dddeebe029239bc43e01f032d023111931e694483c14bb7301cef2b15f73970b30f41a61d188f095d81c06b8ea8ca4d268186bee1516bf8d9e4c1f782c0a636c0d986b7058c6fe39ba3fae75ed0b75713edd9c63e81be3a4d3a8a9d2ea8bb48c8f03e883356ef6c08d32e1a4455776093d39aff279564a06050cb3b9388f999fb7ef26e331132796f09d46cbc8b1029186a15e69aa0d8987760e206df4ecdea899947ceebe568ce47443704", 0x7, 0x80, 0xac2, 0x401, 0x100, 0x2, 0x6, 'syz1\x00'})

[  360.344178] Unknown ioctl 1074025794
[  360.360556] Unknown ioctl 1074025794
11:57:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

[  360.853170] hfsplus: unable to find HFS+ superblock
11:57:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x960, 0x0, 0x0, 0x8, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x1b)
request_key(&(0x7f0000000540)='keyring\x00', 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00')
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
recvmsg(r0, 0x0, 0x10023)
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040), 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfca)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

11:57:24 executing program 3:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @local, [], [], 'vlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
socket$inet6(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x0, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x1ff, 0x1, 0x4, 0xfffffffc, 0x1}, 0x20)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e)

11:57:24 executing program 4:
syz_mount_image$minix(0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x2, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x11d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10082, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x1, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0xacb})
setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x4}, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000240)={{0x1, 0x0, @descriptor="59c1a44abc3da6b3"}})
ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000400)=""/145)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000000)

11:57:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:24 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x14)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)={r2, 0x6, "8e60dffc3268"}, &(0x7f0000000580)=0xe)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xac6, 0x200], 0x1f000, 0x302080})
r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r4, 0x5c, 0xda}, &(0x7f0000000340)={'enc=', 'pkcs1', ' hash=', {'blake2s-160\x00'}}, &(0x7f00000003c0)="e883da4c3bc4f4a24de712cd670f12535f108a50d747e7e62a05a26d356960dcbd2e49aab6c226b884611c830a17849d4fb5bd4eafc2b94df098d80ecdda2d72fda3d35856de6c513ac4773f898b40ac37623b8fc4890cec74c2bda4", &(0x7f0000000440)=""/218)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:24 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x0, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

[  360.953087] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  360.962877] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x0, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:25 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x18a00)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000080))
setns(r2, 0x2000000)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:25 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000040)={0x1ff, 0x0, 'client1\x00', 0x5, "f7755d99f50633c0", "de378b3c5f9ed6c38a5415c700ab8fb911ce383287d95ddbb2399f87392abb99", 0xcf6, 0x5})
r2 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  361.153570] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  361.175707] IPVS: ftp: loaded support on port[0] = 21
11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x0, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x0, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:25 executing program 3:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x20013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0)
creat(&(0x7f0000000200)='./bus\x00', 0x0)
dup2(r2, 0xffffffffffffffff)
io_setup(0x9, &(0x7f0000000100))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@remote, @default, @default, @netrom, @default, @default, @remote, @netrom]}, &(0x7f0000000280)=0x48)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7132})
r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
dup2(r3, r4)
io_setup(0x2000dab5, &(0x7f00000003c0)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r4, &(0x7f0000000300), 0x0, 0xfffffffffffffffd}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0xf0cb, r2, &(0x7f0000000300)="b472ec297bcc405bbe98a2a002e4453f2b54d67ea67630c4dccdc1a66d323af3f70c599e7284", 0x26, 0x3b03, 0x0, 0x2, r4}])
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}})
readv(0xffffffffffffffff, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x27c0, 0x0)

11:57:25 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000001c0)={0x100000001, 0x3, 0x80000001, 0x401})
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
linkat(r4, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1400)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1519}], 0x1)

11:57:25 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x5e41}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0xcfea, {{0xa, 0x4e21, 0x401, @dev={0xfe, 0x80, [], 0x42}, 0x4}}}, 0x88)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xffffffff, 0x6, 0x2, 0xd1, 0x3c, 0x3, 0x6}, &(0x7f0000000040)=0x9c)
dup(r0)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000002c0)=0x5000)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$int_out(r3, 0x0, &(0x7f0000000000))

11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x0, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:25 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9fdb140276fa13f7ff3597bb"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x400800, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:25 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100000000}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x440, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310000000000000000000a0000003c0003000800400000000000140002006c6f0000000000009d31f0aa0000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000fc0)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @broadcast}, 0x312, 0x0, 0x0, 0x0, 0x2fe, &(0x7f0000000f80)='macvlan1\x00', 0x2, 0x3e, 0x20})
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000f40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x28, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9)
r5 = socket(0x18, 0x7, 0xd33)
sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)=[{}, {&(0x7f0000000140)="833eeb1705762de61a7611d99a8ec213e93c44b0e76aaa4d3b93bd9b566efe370a1c121913ce54174fdf223778f58525a2dffed0efe599d9f22ae73eae8687f36c3a8457aa2c758985a0e6b3fc8f2807adcecc609a3a0b7431c79601e0904905ee99ad39cc306167cd6c85ad5cc0a3538cc98e116da848943c48cb718741de287d746f7bdb33f1aac8825b3575104a5d12ee251fa8"}, {&(0x7f0000000200)="c0b7abb5159429d998f0b54d6fd240c113d0369a61030e012f8ad852436313d77f3c17a4aba4df8fe7247f944712480391ea77c48f8172b7f7be67a15af8b970349ad70957c73dbd58ca884c18dabe33c646abd98550c611de252487e32a957243bf4de364a3ed01f298460ebef3e112baf434316ebf08cd6f5c985598b767d572df64ccd70f105fa0e996109a47e704052621f62725110a95c4ec094119", 0xffffffb5}, {&(0x7f0000000e80)="ef36f6a2c127e54c575b4f8c3e2fb7ba474c1fcf30275b226d483296cc9575d77788e64ad36fb99b46613304e90d717887147a578c03eb98a7e3c06282d54ee73cfd42f53f5940ae28fa37dff16126400f80d3bfd88b2072b450ff76496b8947e38e3969deec52f5ebe23b188631ea4861557642c6cfeffb4b5bf560b75e4ba9e5cc2d0e449bb713968611066ee3ee0dd84a019759cec8a02bd530f21f5a3cc8c9b6ce0b476e95d61a31c3c1f8e0"}, {&(0x7f0000000000)="c79bb8a10a5068d469731e28528d571621a2b613a352031f8b62791ab9eda0bd1c90eeeac5b82156f38d08f41b121458d6309340ea56b92649d065a9272ce7"}, {&(0x7f0000000a00)="aa990e854ea9c4b3b0ece95023740ce759f6e0f6499daf36480536226ae856c30e08abc0f68eb69a252e0a7475377b65fc1fadf8e91d79ca5350274d2f5957cbf75af60bfa2bebd2f12a2e978ac892e69921c24b7c7624fb63b1de6236068bccbd89a9852725c11f2cb82f9229eeb1982780a2a8f4b94f031f36d849d14375824b3d0fa7b163e4c923be23ff2bde56a4e90956e36a0b1cbec9a613466a855736c245776d3fb54e7e384aa7075b663608cae64e62181ecd6bcbef500f553f75e11e2eac2877ac"}, {&(0x7f0000000b00)="deab94f8e2b27e927609acab608dd9a7b9005ce51f54defa809bf06addddbf29bfc59273f1842e6e140e4d9b4ceb65d0c842ff76b845d8222b86f915ad075b8a59de589aa7ad55360732631d061099258f51b62733856b87438cf0919085b43c6f272c4a90fa6158d2f5b4020fa6944714650116365f60b1537afc85274c31849b9d471c5f81a2ee64a329a2c7c160aa68b314e15e384b81df82f55065839673ebc658bac20a7765656c69e7aafb100769b572886947f147507bd987e51b75432eb7ab09aace95f4008e0e1dfacf6e10074d5c680acaa99ad4eb92fbf13d06072afc8988315446310ea06dcdf6139a281d17d5169f02ee1b616d"}, {&(0x7f0000000c00)="02bb78a43a52a6af0e3d814a04dd1b96077f60c394799f3fb9ccaf5638018dcb6a7c41380ef18a4149aaa01a507efd2702583096b929ba798ce0a37fe9ca062e989e9e3b72dd94c8ef4f05b65b20f3a915fb8f5ac23f98614266f741579a3886792fc2781da8cd49d53c7e2b95900f1df3fecef55dc8e96720e94b1e8a170bf59caf8962277959"}, {&(0x7f0000000cc0)="a09caa3422cef8b2daabc784eca5262c3cfceaf1d2667a714d93b8d689ed46924161d6cb93ff9ccc9ba90d304111861880102563f89e45203e11dd2ba903ce4310f44964f701af6fc66b7ce6055076c5f0eb0b893a09ccc0983f9ed825faf064ca5c1f670820eca1b8e58d329014fe12d0db93c7938f15405258b041c3c7382a6fbe096119b88a21f250ed0c951c325a7b91f2b541ff5f2b3e83c3c058f6e4a2d60639a30da98a3323557e7877e1770bef18888f334ca53aa2d89d1590f18257c6f1e102e9d499648dee4bc71d09a90e7eb2dfd2cd364210d93beebb224ae0d4dd01ed02fbc56021e8c2d502c82127d0bd1a"}], 0x1000034c}, 0xc100)
socket$packet(0x11, 0x3, 0x300)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe4602d727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0x10c7}], 0x1)

11:57:25 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"/771], 0x10}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x400000)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@broadcast, @in6=@empty, 0x4e23, 0x0, 0x4e23, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x4000000000000}, {0x0, 0x0, 0x800}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1, 0x4000000b6)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'macvtap0\x00', 0x3}, 0x18)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
keyctl$chown(0x4, r4, r6, r7)
ioctl$TUNSETGROUP(r3, 0x400454ce, r7)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)

11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x0, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:25 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:26 executing program 5:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="c04e4f5c0156d3b288c8a68d3bab1c216c7cb1f4b8611cb38855cb9b86209142c0c06c3ca5ae1d085d81921db6b3a70c67160614cfbc3cddd7d9c90e2373a42436338cf7a262bd00cd34ccf33cbdd5566c5f02fad05072708f53bb9b3fdb13ecc98e95f1ca3f1368fda910a49afafdfe0da384d9d87f17db4c8df0437bc02a0c6e22d404e715451b6f91b22d9a7aad19720bc6877dd121de7f3606ae7298efcffaa31c1236833e1270dc8fc2ff98e39cd07c", 0xb2}, {&(0x7f000001a740)="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", 0x1000}, {&(0x7f0000000040)="089009864831318d", 0x8}, {&(0x7f00000002c0)="f3b98cb8752ce1405009d6e30f387e3b8518f7b65ca6b923a9e8b3eb4639c1970d7fb91d76f789a788f648a4b6ad63b4d27984bc19a2d42e890ccde1e3bf87e076d10499b90041073bc8266388f4dc6b44ac67e1e8f13f594d62572b0b6fd8eb143c30325e9c436e622abeca6e4336d1e515887b2ce78d81f24dc6ff128b02267a4d6ba0586b1727efc136e85546775b104000035fa1dda183021251e3341d82d0477b7f0866a0414008433af139529c7975a537535d1e430ad51ad4ce70a8593862d287aec22467a3", 0xc9}, {&(0x7f0000000500)="2ef9bf27dada5a5fab29c4dc98ada5e7bf0efbaae5904daaba6b441cf4781b355f65093495d2c647888230ae61ec7bff42863cc6ad824097ab89a639458abd8b17ecf4723320650075670a87107a8f2446c37a94866f44d8811b732ab257032cd1460fd1fc1da373b700b0b446c465bf9b9767b118f99166c65cb21cc958e680d67bf7bc9a5955fef53ed768ee09afbe33fcb46a6937865dbdf9341fa0f83452e9695ce5e3abf6949c03f0cf8c77f1a4c0c3d23f6eeabf2ea648010527aed485f1d1bd47c5a8", 0xc6}, {&(0x7f0000000600)="998c5dd761d734e5e856eb5943615d2ec4576784b2fecd0dc429368745708ee6417f3610cf94d4162d64918fd6ad0c37b9fa2ca210c9c3708add8cc6625347f0073b1e1ea74abe76339ea88adf1a743ab2e19fc487f20fe705c8e5cdc9d4f6f190062404db734bdfefda10bde47cc858bca48b8874d9fbc079d1bc1237b7a2e1beb1c5e751089c6cba538716e0b7bcf3b22d1b0d645643bb040000", 0x9b}, {&(0x7f00000006c0)="232f4d390ce39a70a8b16c4aa2f93670f3223665eef610ee76c72ba0eefa4a2b1ee6c296f21daea17a5e8d44ea762712cb2ad67f2871c4edbff6b138398360eee204761dde0853e37a8bab006a659dc96d8c25aa79c6d41ba7512378a5b9f2a6d9d07a778a12f590b84478b13319c941eb28dda0c826fec55f29c25401", 0x7d}], 0x7}, 0x4804)
write$cgroup_pid(r0, 0x0, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200091})
socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000480)=0x1)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00')
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[  362.410072] kauditd_printk_skb: 14 callbacks suppressed
[  362.410079] audit: type=1800 audit(1590667046.303:419): pid=16805 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16456 res=0
11:57:26 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000040))

11:57:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4)
sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000019680)={0x964, 0x1, 0x5, 0x801, 0x0, 0x0, {0xc}, [{{0x254, 0x1, {{0x1, 0xffffffff}, 0x0, 0x1f, 0x7, 0x2, 0x1d, 'syz0\x00', "e7d7f6efee3a45265be8a424d1e016c8a27da7ebaf951b19a783e804a2b988f2", "b719fd1de954b4b23f0b5ecd0531663e6315031c9bd0100a43963415d48c92d8", [{0x7, 0x4, {0x0, 0x8}}, {0x72b8, 0x7, {0x1, 0x5e}}, {0x1c7, 0x100, {0x0, 0x6}}, {0xd7e, 0x7ff, {0x2, 0xfffffc0a}}, {0x1, 0x8, {0x0, 0x5}}, {0x1ff, 0x2, {0x1, 0xfff}}, {0x2, 0x1000, {0x1, 0x200}}, {0x1000, 0x3, {0x0, 0xffff}}, {0x8, 0x0, {0x2, 0x6}}, {0x4, 0x4, {0x2, 0x6}}, {0x3ff}, {0x8, 0x0, {0x1, 0x4}}, {0x8, 0x9ab, {0x3, 0xf9b}}, {0x3, 0x3, {0x3}}, {0x4, 0x800, {0x2}}, {0xfffc, 0x2, {0x6, 0x2}}, {0x1b2, 0x5, {0x3}}, {0x1, 0x15, {0x0, 0x80000000}}, {0x8, 0x1000, {0x3, 0xb8}}, {0x3, 0x9, {0x0, 0x4}}, {0x3ff, 0x1fe, {0x0, 0x7}}, {0x1, 0x7, {0x1, 0x3}}, {0x1f, 0x2, {0x3, 0xffffffff}}, {0x0, 0xfad9, {0x3, 0x5}}, {0x9, 0x8, {0x0, 0x163f058d}}, {0x2, 0x8, {0x0, 0x8001}}, {0x20, 0x8, {0x2, 0xffffffff}}, {0x40, 0x8, {0x3, 0x1}}, {0x8cfd, 0x5, {0x0, 0x8}}, {0x2, 0x3b7, {0x0, 0x9}}, {0x1, 0x5, {0x2, 0x1}}, {0x800, 0xf90c, {0x3, 0x3ff}}, {0x6, 0x225, {0x1, 0x4}}, {0x0, 0x2, {0x2, 0x7}}, {0x8a06, 0x0, {0x2, 0x6}}, {0x0, 0x3, {0x3, 0x8}}, {0xff, 0xc0a, {0x3, 0x3f}}, {0x1, 0x0, {0x3, 0xffffffe0}}, {0x3f, 0x2, {0x2, 0x7ff}}, {0xb, 0x1, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x7, 0x9, 0x82, 0x100, 0x22, 'syz0\x00', "1c773149e7c3b58c16cea4e19a26545246808e64977d982ca466910115374ce4", "2bc9b92086ad892d606e085aabea834b8a542296f96b5b37c815e719453dbd04", [{0x9, 0x5, {0x1, 0x3ff}}, {0x8, 0x8, {0x1, 0x5}}, {0x9, 0x800, {0x1, 0x17d}}, {0x7, 0x0, {0x6362790f8a2f582d, 0xd9}}, {0x8, 0x8001, {0x2}}, {0x400, 0x0, {0x3, 0x8}}, {0x5, 0x0, {0x1}}, {0x3, 0x6, {0x2, 0x3}}, {0x8, 0x400, {0x1, 0x6}}, {0x8, 0x7, {0x1, 0x7e97}}, {0x3f, 0x5, {0x1, 0xb1}}, {0x1ff, 0x5, {0x1, 0x2}}, {0x9, 0x7fff, {0x1, 0xff}}, {0x0, 0xd0f, {0x0, 0x1ff}}, {0xff, 0x81, {0x0, 0x7fffffff}}, {0x7, 0x2, {0x1, 0x12}}, {0x8001, 0x6, {0x3, 0xfffffffc}}, {0x0, 0x8, {0x2, 0xfffffffb}}, {0x4, 0x7, {0x0, 0x6}}, {0x5, 0x771, {0x0, 0x2d}}, {0xc000, 0x100, {0x3, 0xff}}, {0x8, 0x2, {0x2, 0x2}}, {0x400, 0x3ff, {0x0, 0x2}}, {0x3, 0x3, {0x1, 0x6eb8}}, {0x12, 0x100, {0x2}}, {0xfffc, 0x6, {0x0, 0x8a}}, {0x7fff, 0x3, {0x1, 0xd0}}, {0xec, 0x7, {0x1, 0x20}}, {0x100, 0x3f, {0x2, 0x1ff}}, {0x7ff, 0x6, {0x3, 0x4}}, {0x802, 0x2, {0x3, 0xff}}, {0x19, 0x3f7f, {0x1, 0x7}}, {0x5, 0x77fa, {0x3, 0x1ff}}, {0x8000, 0x6, {0x0, 0x3}}, {0xb5, 0x2, {0x2, 0x2}}, {0x9, 0x6, {0x2, 0xfffffff7}}, {0x94, 0x3a10, {0x0, 0x8}}, {0x100, 0x2, {0x3, 0x10001}}, {0x8f5a, 0x80, {0x2, 0x4}}, {0x200, 0x1, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0xdffb}, 0x0, 0x15, 0x7fff, 0x3, 0x1d, 'syz1\x00', "fc053747bd5bc8b3c50c0f2f84d25dbe50789122fc6a1007f947ac88eef7484b", "4e70e143f1d53fd60b8023e43192df6cb7afe396b187a41280f3975a84f7d1e2", [{0x6, 0xffff, {0x1, 0x7}}, {0xfc8f, 0x3, {0x0, 0x4000000}}, {0x1, 0x6, {0x375e550e8e3739d9, 0xffffffff}}, {0xff, 0x2, {0x1, 0x20}}, {0xbd4c, 0xde, {0x3, 0x4}}, {0xf4, 0x0, {0x2, 0x5}}, {0x3, 0x400, {0x2, 0x4}}, {0x3, 0x7ff, {0x2, 0x1}}, {0xbd, 0x5, {0x1, 0x1ff}}, {0x5, 0x3, {0x3, 0x9}}, {0x8001, 0x1, {0x0, 0x1}}, {0x101, 0xb68c, {0x3, 0x8}}, {0xfffe, 0x6, {0x1, 0x8}}, {0x1, 0xa2a, {0x1, 0x4}}, {0x1, 0x4, {0x2}}, {0x4, 0x8, {0x2, 0x3ff}}, {0x13c0, 0x8, {0x2, 0x1a5f}}, {0xd, 0x1, {0x1, 0x8}}, {0x7ff, 0x1, {0x1, 0xff}}, {0x3ff, 0x3f, {0x3, 0x1b93}}, {0x3, 0xff, {0x0, 0x7}}, {0x9, 0x3, {0x1, 0x80000000}}, {0x80, 0x3, {0x1, 0x9}}, {0x400, 0x4, {0x2, 0x7}}, {0x8, 0x2, {0x1, 0x4}}, {0x101, 0x7ff, {0x2, 0x5df3}}, {0x0, 0x4, {0x0, 0x8}}, {0x2, 0x8, {0x1, 0x1}}, {0xa06d, 0x1274, {0x0, 0x101}}, {0x7de5, 0x800, {0x2, 0x1}}, {0x33, 0x9, {0x2, 0x4}}, {0xff, 0xec33, {0x3, 0xffff}}, {0x5, 0xbcc4, {0x2, 0x5}}, {0x200, 0x3f}, {0x8, 0x6, {0xc3c54c615bdd221c, 0x5}}, {0x1, 0x5, {0x1, 0x1}}, {0xb4a4, 0x0, {0x1, 0x5}}, {0xd08, 0xb4, {0x0, 0x32}}, {0x7fff, 0x796a, {0x1, 0x2}}, {0x400, 0x6, {0x1, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x5, 0x40, 0x8, 0x4, 0xb, 'syz0\x00', "fbe28c0eeb73122261e4fc34927371c3c488750684cd1cdba690a46860106467", "58fe757aac948eb5439a8de25eebb81d505a602e4bcf6f1138f1ee9d4fc16174", [{0x3, 0x5, {0x2, 0x4}}, {0x5, 0x5, {0x1, 0x81}}, {0x5023, 0xfc2, {0x1, 0x8}}, {0x3, 0x6, {0x0, 0x6}}, {0xc30, 0x4, {0x0, 0x4}}, {0x1ff, 0x1, {0x0, 0x3f}}, {0x0, 0xd3f8, {0x5, 0xc9d3}}, {0x400, 0x6, {0x2, 0x6}}, {0x8, 0x3}, {0x7f, 0x6, {0x0, 0x4}}, {0x8, 0xffff, {0x3, 0x10000}}, {0x90, 0x101, {0x0, 0x693}}, {0x1, 0x8, {0x2, 0x7e18}}, {0x40, 0x3, {0x2, 0x4}}, {0x1, 0x3, {0x2, 0xcf}}, {0x7, 0x20, {0x3, 0x7}}, {0xd5, 0xffff, {0x2, 0x8873ce2}}, {0x81, 0x0, {0x0, 0x80000000}}, {0x40, 0x80, {0x1, 0xffffffff}}, {0x16d2, 0x8b1, {0x2, 0x5c9}}, {0x3, 0x5, {0x0, 0x8}}, {0x9, 0x1ff, {0x3, 0x80}}, {0x3, 0x4, {0x1, 0x1}}, {0x2, 0xfe01, {0x2, 0x6db}}, {0x6, 0x666d, {0x0, 0x6d847346}}, {0x2, 0xff01, {0x2, 0x8}}, {0x200, 0x9, {0x2, 0xe5}}, {0x401, 0x3ff, {0x3, 0x8}}, {0x8, 0x9, {0x1, 0x8}}, {0x5, 0x60, {0x2, 0x7c01}}, {0x400, 0x9, {0x0, 0xb19e}}, {0xfffa, 0x3, {0x2, 0x9}}, {0x3f, 0x4, {0x2}}, {0x7, 0x7, {0x1, 0x33}}, {0x2, 0x3, {0x3, 0x1}}, {0x3, 0x2}, {0x7, 0x5, {0x3, 0x2}}, {0x4, 0x7f, {0x3, 0x81}}, {0x4, 0x9, {0x0, 0x7}}, {0x2, 0x7, {0x1, 0x2}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x25, 0x0, 0x2000002, 0x200000000, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000}, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x6, 0x0)
readv(r5, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)=""/102400, 0x19000}], 0x2)

[  362.467247] audit: type=1800 audit(1590667046.343:420): pid=16899 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16457 res=0
[  362.605517] audit: type=1800 audit(1590667046.493:421): pid=16915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16454 res=0
11:57:26 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="041025bd7000ffdbdf2502000000050005000500000005000600040000000800030090099400"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8ceb005558dc"], 0x0, 0x80}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/214, 0xd6)

11:57:26 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000019905000000000000000000000000240001001400010008010400abd2b7e3af222b8fe00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x40003e, 0x0)

11:57:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {0x0}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="010068df957ed712d8e8ba2b3f36d702000000000000000095fc11b23cb0e9472250ff7e993e39957df1a4933069dd0bebe2d677bace96a37ef4411625d31960ff920a5b726eaef6ff4b168eb7c0b2bc6b59cacd834a6826414351626f665afaf504c3916d0cf47317140e60c719b8eeefce9914eede771e871623b1a09838e493a7407060de6d4701183bf6258c1c6cd84c73b67c20"], 0x9, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
socket(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0xfff, @mcast2, 0x3}, {0xa, 0x4e22, 0x0, @private1, 0x8}, 0x5, [0x2, 0x4, 0x0, 0x0, 0x5, 0x5, 0x81c, 0x6d]}, 0x5c)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x3c, @multicast2, 0x4e21, 0x4, 'sh\x00', 0x10, 0x9ea, 0x38}, 0x2c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380)=0x3, 0x4)
renameat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00')

11:57:26 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:26 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000019905000000000000000000000000240001001400010008010400abd2b7e3af222b8fe00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x40003e, 0x0)

[  363.017380] audit: type=1800 audit(1590667046.913:422): pid=16948 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16462 res=0
11:57:27 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:27 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000019905000000000000000000000000240001001400010008010400abd2b7e3af222b8fe00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x40003e, 0x0)

11:57:27 executing program 0 (fault-call:1 fault-nth:0):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  363.223433] overlayfs: filesystem on './file0' not supported as upperdir
[  363.307841] FAULT_INJECTION: forcing a failure.
[  363.307841] name failslab, interval 1, probability 0, space 0, times 1
11:57:27 executing program 4:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000001040000000000edffffff000000a0a02838a962ae66d13d6e9969daf35c713a7f6493540aa66f3c7728185b0400c4", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e65766500001000028006000500000000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1d, 0x100, 0x70bd27, 0x25dfdbfe, {0x1c, 0x0, 0x0, r6, 0x4, 0x1a9, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  363.358999] audit: type=1800 audit(1590667047.243:423): pid=16968 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16462 res=0
[  363.399730] CPU: 0 PID: 16970 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  363.407666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  363.417045] Call Trace:
[  363.419750]  dump_stack+0x1b2/0x283
[  363.423484]  should_fail.cold+0x10a/0x154
[  363.427712]  should_failslab+0xd6/0x130
[  363.431733]  kmem_cache_alloc_trace+0x2b7/0x3f0
[  363.436506]  htab_map_alloc+0x17e/0x1200
[  363.440620]  ? __might_fault+0x177/0x1b0
[  363.444695]  SyS_bpf+0x4a1/0x34e0
[  363.448177]  ? bpf_prog_get+0x20/0x20
[  363.452039]  ? __mutex_unlock_slowpath+0x75/0x780
[  363.456897]  ? wait_for_completion_io+0x10/0x10
[  363.461619]  ? vfs_write+0x319/0x4d0
[  363.465345]  ? fput+0xb/0x140
[  363.468466]  ? do_syscall_64+0x4c/0x640
[  363.472464]  ? bpf_prog_get+0x20/0x20
[  363.476274]  do_syscall_64+0x1d5/0x640
[  363.480225]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  363.485433] RIP: 0033:0x45ca29
[  363.488626] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  363.496379] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  363.503662] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  363.510958] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  363.518318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  363.525588] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:27 executing program 0 (fault-call:1 fault-nth:1):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:27 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netpci0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x5, 0x5, 0xfffffe1a, 0x4, 0xffffff7f, 0x9000, 0x4da8, [0x5, 0x80000003]}})
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100))
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r1, &(0x7f0000000600)="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", 0xe00)
sendfile(r1, r2, 0x0, 0x12000)

[  363.614791] audit: type=1800 audit(1590667047.443:424): pid=16921 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16454 res=0
[  363.615344] vivid-009: disconnect
[  363.681168] FAULT_INJECTION: forcing a failure.
[  363.681168] name failslab, interval 1, probability 0, space 0, times 0
[  363.697650] CPU: 0 PID: 16986 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  363.705618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  363.714993] Call Trace:
[  363.717653]  dump_stack+0x1b2/0x283
[  363.721317]  should_fail.cold+0x10a/0x154
[  363.725496]  should_failslab+0xd6/0x130
[  363.729504]  kmem_cache_alloc_node_trace+0x25a/0x400
[  363.734641]  __kmalloc_node+0x38/0x70
[  363.738468]  bpf_map_area_alloc+0x2e/0x70
[  363.742643]  htab_map_alloc+0x88e/0x1200
[  363.746740]  ? __might_fault+0x177/0x1b0
[  363.750855]  SyS_bpf+0x4a1/0x34e0
[  363.754336]  ? bpf_prog_get+0x20/0x20
[  363.758149]  ? __mutex_unlock_slowpath+0x75/0x780
[  363.763054]  ? wait_for_completion_io+0x10/0x10
[  363.767743]  ? vfs_write+0x319/0x4d0
[  363.771568]  ? fput+0xb/0x140
[  363.774710]  ? do_syscall_64+0x4c/0x640
[  363.778698]  ? bpf_prog_get+0x20/0x20
[  363.782522]  do_syscall_64+0x1d5/0x640
[  363.786475]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  363.791683] RIP: 0033:0x45ca29
[  363.794879] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  363.802595] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  363.809873] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  363.817166] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  363.824459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  363.831731] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
[  363.872393] audit: type=1800 audit(1590667047.763:425): pid=16993 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=15921 res=0
[  363.935012] audit: type=1804 audit(1590667047.783:426): pid=16987 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/219/file0" dev="sda1" ino=15921 res=1
11:57:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
socketpair(0x29, 0x0, 0x0, &(0x7f0000000300))
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000013c0)={0x4, 0x0, 0x0, 0x0, 0x100}, 0x14)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x0, 0x7, 0xfffff4d3, 0x0, 0x1}, &(0x7f0000000100)=0x98)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8800, 0x0)
r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x10c, &(0x7f0000000140)={0xc8, 0x2, 0x5})
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x1, @local, 0x2000003}, 0x1c)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x100800)
sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)

11:57:27 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@llc={0x1a, 0x1e, 0x40, 0x1f, 0xe5, 0x0, @multicast}, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x4}}, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x6bf1254b65165a49)
r4 = dup(r1)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000180))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x24240, 0x0)

11:57:27 executing program 0 (fault-call:1 fault-nth:2):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:27 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000001c0)={0x6, 0x9, &(0x7f0000000240)=[0x9, 0x11, 0x4, 0x3, 0x48, 0x1, 0x1, 0x53a, 0x5], &(0x7f0000000100)=[0x8, 0x81, 0xffff], &(0x7f0000000140)=[0x3, 0x8, 0x9, 0x8000, 0x7, 0x9, 0x9], &(0x7f0000000180)=[0x924, 0x3, 0xff]})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
shutdown(r0, 0x1)
fadvise64(0xffffffffffffffff, 0xf12, 0x4, 0x4)

11:57:27 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
ioctl$KVM_NMI(r3, 0xae9a)

[  364.114481] FAULT_INJECTION: forcing a failure.
[  364.114481] name failslab, interval 1, probability 0, space 0, times 0
[  364.138417] CPU: 1 PID: 17010 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  364.146378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  364.155741] Call Trace:
[  364.158345]  dump_stack+0x1b2/0x283
[  364.161984]  should_fail.cold+0x10a/0x154
[  364.166391]  should_failslab+0xd6/0x130
[  364.170360]  kmem_cache_alloc_node_trace+0x25a/0x400
[  364.175513]  __get_vm_area_node+0xed/0x340
[  364.179754]  __vmalloc_node_range+0xa5/0x690
[  364.184145]  ? htab_map_alloc+0xaf7/0x1200
[  364.188428]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  364.193865]  ? kasan_unpoison_shadow+0x30/0x40
[  364.198445]  ? htab_map_alloc+0xaf7/0x1200
[  364.202661]  __vmalloc_node_flags_caller+0x4a/0x60
[  364.207573]  ? htab_map_alloc+0xaf7/0x1200
[  364.211793]  bpf_map_area_alloc+0x5e/0x70
[  364.215925]  htab_map_alloc+0xaf7/0x1200
[  364.219977]  SyS_bpf+0x4a1/0x34e0
[  364.223415]  ? bpf_prog_get+0x20/0x20
[  364.227199]  ? __mutex_unlock_slowpath+0x75/0x780
[  364.232112]  ? wait_for_completion_io+0x10/0x10
[  364.236779]  ? vfs_write+0x319/0x4d0
[  364.240491]  ? fput+0xb/0x140
[  364.243584]  ? do_syscall_64+0x4c/0x640
[  364.247555]  ? bpf_prog_get+0x20/0x20
[  364.251358]  do_syscall_64+0x1d5/0x640
[  364.255233]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  364.260428] RIP: 0033:0x45ca29
11:57:28 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)

[  364.263602] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  364.271308] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  364.278598] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  364.285870] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  364.293138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  364.300400] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
[  364.373363] audit: type=1800 audit(1590667048.263:427): pid=17019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16052 res=0
[  364.424762] vivid-009: reconnect
11:57:28 executing program 3:
r0 = getpid()
getpid()
r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x40, 0x7, 0x20, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe7, 0x0, @perf_config_ext={0xafec, 0x2000000}, 0x9920, 0x20, 0x2c, 0x5, 0x1, 0x492d, 0x840}, 0x0, 0x7, 0xffffffffffffffff, 0x1)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080))
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x12}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, r0, 0x0, r1, 0xe)
r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4000000020000007, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xe43)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000080), 0xfffffffffffffdfc, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="bee821057ec9afcb6c52cc6b3bee668805234ad5934992532dfdc187c379e073c62872159a7331640f114fda", 0x2c}], 0x1}, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
socket$kcm(0x10, 0x5, 0x0)

11:57:28 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x44200, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000340)='.//ile0\x00', 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00906, 0x8703, [], @value64=0x6da}})
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0b2441adb3000000010000000000feff0300000000000000080000", @ANYRES32=0x0, @ANYRES32=r1], 0x2c, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='le0,lowerdir=oV\x00\x00\x00\x00\x00\x00workdir=./file1\x00'/49])
mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000))
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x3})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0xba7135d56489007f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x10)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00')

11:57:28 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="cf6a8513ebb643575c03a1423e268b3c00d0be6d44795df6cea8ca12c598392c3bbee048acdf6f4b0e9cd9c4fe960abc89c2dceca016eca6547c8258a3fab73e94e9b0f8df7c3831d7ecf3cc5a2034f8794d807a3c1e9cd15094d94a4edd3d384ddac297301d000963399503b5ed8af1a524a4274dfb2e88cb09e69916f4c3e622c28b016cf19b84013f5f1c8fe5fac3427241944dfa3719e35aa27be7579c969c967eeac681f3f34d59d0ee3c68f0d2d612560918edd42492031a9268a640d0d9a91159036d67748a1e4528e5cf14151b1c04d5dc15a27e313983fc1a09")
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x600800, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000000))

[  364.538009] audit: type=1800 audit(1590667048.433:428): pid=17030 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16052 res=0
11:57:28 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000014c0), &(0x7f0000000080)=0x68)
r3 = dup(r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents64(r4, &(0x7f0000000280)=""/4075, 0xfeb)
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="940000001a7de899ae6ea9ee24da805c766a31fd49d7f6073d99d7da47dcd0d477311851a8d3aaea2ea57e0acb533f15297b09e03cdba4d1805606acb27a98d8f1db93ae485b753d11f6e93407c4efc6da01cfbe3137cd08f5c6615cf8dcf26b92b5644b4fa9c228eb6e0f4d2aa7788ab594139bc3c8513bcb04d94ebe8498dfe0103efd3a7368ae99dab07cd2207c92d3666bc5c6ccd83073b5a366388d6bd877b46a7e7c0c31f270a5768f6ab6f439008d126f82204c42eb65928d514f2b901ad88557745e21a4aaafdd0aeb42897ee39ecb5c6b40dafd59628543fb3116869389902ec9e8c7854ee96e970a853b6dc59f9a", @ANYRES16=0x0, @ANYBLOB="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"], 0x94}}, 0x1)
sendto$unix(r4, &(0x7f0000000100)="045ac43c7a02ab1daa4460025d37068decb0e346c4e41dd38d57b8dab2f01a23684d2619023465c7f3a80f487f46c74c232fd1a40f42d88b59bac045e930ca7dfc3b289fe233e756fc271ced78cd7cf2891d7eca525aa4478b0c816e72be117f8ab45a5430ac8a925a4d8c663a741e10a45fe7ae396c7d4eaea18669e7f355ee7bed1c066cb56cc7d987118f67f9b9848c04937e6bd65d9daf0224ff84025a2c052d58241e6890a2920c94faaa650b606d0992ee8d8b9dcd81b7d5673f2362f3abd52e23b87c28c648d272a67e2752766c47be4d79253f0f245046b0611b197770fb", 0xe2, 0x20040000, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @private1={0xfc, 0x1, [], 0x1}, @remote, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x20c200a2, r5})
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

11:57:28 executing program 0 (fault-call:1 fault-nth:3):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:28 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x1e, 0x2, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1000)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2}, 0x10)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2}, 0x10)
dup3(r2, r3, 0x0)

[  364.720123] FAULT_INJECTION: forcing a failure.
[  364.720123] name failslab, interval 1, probability 0, space 0, times 0
[  364.796881] CPU: 1 PID: 17047 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  364.804815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  364.814211] Call Trace:
[  364.816816]  dump_stack+0x1b2/0x283
[  364.820468]  should_fail.cold+0x10a/0x154
[  364.824639]  should_failslab+0xd6/0x130
[  364.828658]  kmem_cache_alloc_node_trace+0x25a/0x400
[  364.833782]  alloc_vmap_area+0xf0/0x7c0
[  364.837783]  ? purge_vmap_area_lazy+0x40/0x40
[  364.842289]  ? rcu_read_lock_sched_held+0x10a/0x130
[  364.847353]  ? kmem_cache_alloc_node_trace+0x383/0x400
[  364.852677]  __get_vm_area_node+0x126/0x340
[  364.857026]  __vmalloc_node_range+0xa5/0x690
[  364.861454]  ? htab_map_alloc+0xaf7/0x1200
[  364.865708]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  364.871180]  ? kasan_unpoison_shadow+0x30/0x40
[  364.875814]  ? htab_map_alloc+0xaf7/0x1200
[  364.880097]  __vmalloc_node_flags_caller+0x4a/0x60
[  364.885066]  ? htab_map_alloc+0xaf7/0x1200
[  364.889318]  bpf_map_area_alloc+0x5e/0x70
[  364.893486]  htab_map_alloc+0xaf7/0x1200
[  364.897580]  SyS_bpf+0x4a1/0x34e0
[  364.901092]  ? bpf_prog_get+0x20/0x20
[  364.904902]  ? __mutex_unlock_slowpath+0x75/0x780
[  364.909783]  ? wait_for_completion_io+0x10/0x10
[  364.914491]  ? vfs_write+0x319/0x4d0
[  364.918225]  ? fput+0xb/0x140
[  364.921349]  ? do_syscall_64+0x4c/0x640
[  364.925335]  ? bpf_prog_get+0x20/0x20
[  364.929149]  do_syscall_64+0x1d5/0x640
[  364.933055]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  364.938254] RIP: 0033:0x45ca29
[  364.941448] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  364.949179] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  364.956462] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  364.963746] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  364.971031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  364.978329] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:29 executing program 5:
perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0xffff0000, 0x4)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x7, 0x0, 0x0, 0x80000, 0x0)

11:57:29 executing program 3:
mkdir(0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lc\x00', 0x0, 0x1}, {@empty}}, 0x44)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r1, 0x4200, 0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="bf", 0x1}], 0x1)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x23, 0x2, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r5, 0xce3}, 0x8)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r6, 0x0, 0x8400fffffffb)

11:57:29 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000300)=""/177, &(0x7f0000000040)=0xb1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000000)='./file0/file1\x00', 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000580)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b)
read$FUSE(r2, 0x0, 0x0)

11:57:29 executing program 0 (fault-call:1 fault-nth:4):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  365.621651] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  365.676494] FAULT_INJECTION: forcing a failure.
[  365.676494] name failslab, interval 1, probability 0, space 0, times 0
11:57:29 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010000000000dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:29 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  365.739869] CPU: 1 PID: 17072 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  365.747810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  365.757173] Call Trace:
[  365.759781]  dump_stack+0x1b2/0x283
[  365.763433]  should_fail.cold+0x10a/0x154
[  365.767601]  should_failslab+0xd6/0x130
[  365.771625]  kmem_cache_alloc_node_trace+0x25a/0x400
[  365.777362]  __kmalloc_node+0x38/0x70
[  365.781216]  __vmalloc_node_range+0x182/0x690
[  365.785748]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  365.791218]  ? kasan_unpoison_shadow+0x30/0x40
[  365.795815]  ? htab_map_alloc+0xaf7/0x1200
[  365.800065]  __vmalloc_node_flags_caller+0x4a/0x60
[  365.805010]  ? htab_map_alloc+0xaf7/0x1200
[  365.809261]  bpf_map_area_alloc+0x5e/0x70
[  365.813423]  htab_map_alloc+0xaf7/0x1200
[  365.817512]  SyS_bpf+0x4a1/0x34e0
[  365.820979]  ? bpf_prog_get+0x20/0x20
[  365.824788]  ? __mutex_unlock_slowpath+0x75/0x780
[  365.829668]  ? wait_for_completion_io+0x10/0x10
[  365.834383]  ? vfs_write+0x319/0x4d0
[  365.838111]  ? fput+0xb/0x140
[  365.841230]  ? do_syscall_64+0x4c/0x640
[  365.845246]  ? bpf_prog_get+0x20/0x20
[  365.849059]  do_syscall_64+0x1d5/0x640
[  365.852968]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  365.858166] RIP: 0033:0x45ca29
[  365.861360] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  365.869081] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  365.876361] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  365.883640] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  365.890929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  365.898212] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:29 executing program 0 (fault-call:1 fault-nth:5):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:29 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x8, 0x81, 0xd7c5, 0x9}, 0x10)

[  365.966591] FAULT_INJECTION: forcing a failure.
[  365.966591] name failslab, interval 1, probability 0, space 0, times 0
[  365.978696] CPU: 1 PID: 17101 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  365.986964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  365.996329] Call Trace:
[  365.998935]  dump_stack+0x1b2/0x283
[  366.002583]  should_fail.cold+0x10a/0x154
[  366.006753]  should_failslab+0xd6/0x130
[  366.010735]  kmem_cache_alloc_node_trace+0x25a/0x400
11:57:29 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  366.015857]  __kmalloc_node+0x38/0x70
[  366.019681]  __vmalloc_node_range+0x182/0x690
[  366.024212]  ? retint_kernel+0x2d/0x2d
[  366.028153]  ? htab_map_alloc+0xaf7/0x1200
[  366.032404]  __vmalloc_node_flags_caller+0x4a/0x60
[  366.037347]  ? htab_map_alloc+0xaf7/0x1200
[  366.041592]  bpf_map_area_alloc+0x5e/0x70
[  366.045753]  htab_map_alloc+0xaf7/0x1200
[  366.049844]  SyS_bpf+0x4a1/0x34e0
[  366.053316]  ? bpf_prog_get+0x20/0x20
[  366.057130]  ? __mutex_unlock_slowpath+0x75/0x780
[  366.061987]  ? wait_for_completion_io+0x10/0x10
11:57:29 executing program 1:
r0 = dup(0xffffffffffffffff)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000180))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0x0, 0x0, 0x0, 0x1}}, 0x80)
keyctl$session_to_parent(0x12)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)

[  366.066695]  ? vfs_write+0x319/0x4d0
[  366.070411]  ? fput+0xb/0x140
[  366.073699]  ? do_syscall_64+0x4c/0x640
[  366.077679]  ? bpf_prog_get+0x20/0x20
[  366.081500]  do_syscall_64+0x1d5/0x640
[  366.085666]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  366.090857] RIP: 0033:0x45ca29
[  366.094046] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  366.101767] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  366.109054] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
11:57:30 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="000428bd7000c50700001f00000008009a000000000007002100616100002c002280080001000000008008000300790000000800020006000000080003000000000008000400000000000700210061610000080001000000000008009a00020000002c00228008000100000000700800030007000000080005000200000008000200040000000800010008000000041a4016da5d3f0d779a916c4ab268d61664e02ab78db1ee41940b858fabd80ad7157988f23a21911820a0b3b8bc9b953bf96e74201406dca7e8f33a17be94f394bd7e086c547490220ed49ae2200c2303"], 0x94}, 0x1, 0x0, 0x0, 0x8000800}, 0x48000)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x0, 0x0, 0x0, 0x100}}, 0x80)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
r4 = dup(r3)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  366.116336] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  366.123625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  366.130923] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:30 executing program 5:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff800, 0x8}, 0x40a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0xfffffffb, "ca57175b199616a911a3e2316018daae75ca5b3911cd103975019278566bfb63", 0x1, 0x4, 0x8, 0xff06ff, 0x2})

11:57:30 executing program 0 (fault-call:1 fault-nth:6):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  366.235666] FAULT_INJECTION: forcing a failure.
[  366.235666] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  366.252684] CPU: 0 PID: 17127 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  366.260717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  366.270096] Call Trace:
[  366.272714]  dump_stack+0x1b2/0x283
[  366.276384]  should_fail.cold+0x10a/0x154
[  366.280983]  __alloc_pages_nodemask+0x22b/0x2730
[  366.285759]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  366.290275]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  366.295365]  ? bpf_map_area_alloc+0x5e/0x70
[  366.299694]  ? htab_map_alloc+0xaf7/0x1200
[  366.304363]  ? SyS_bpf+0x4a1/0x34e0
[  366.308030]  ? do_syscall_64+0x1d5/0x640
[  366.312560]  ? perf_trace_lock+0x109/0x4b0
[  366.316953]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  366.324209]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  366.329846]  ? HARDIRQ_verbose+0x10/0x10
[  366.333927]  ? _raw_spin_unlock+0x29/0x40
[  366.338127]  ? fs_reclaim_acquire+0x10/0x10
[  366.342478]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  366.348010]  ? kasan_unpoison_shadow+0x30/0x40
[  366.353136]  alloc_pages_current+0xe7/0x1e0
[  366.357508]  __vmalloc_node_range+0x3f9/0x690
[  366.362025]  ? htab_map_alloc+0xaf7/0x1200
[  366.366273]  __vmalloc_node_flags_caller+0x4a/0x60
[  366.371192]  ? htab_map_alloc+0xaf7/0x1200
[  366.375445]  bpf_map_area_alloc+0x5e/0x70
[  366.379587]  htab_map_alloc+0xaf7/0x1200
[  366.383672]  SyS_bpf+0x4a1/0x34e0
[  366.387151]  ? bpf_prog_get+0x20/0x20
[  366.390948]  ? __mutex_unlock_slowpath+0x75/0x780
[  366.395789]  ? wait_for_completion_io+0x10/0x10
[  366.400447]  ? vfs_write+0x319/0x4d0
[  366.404169]  ? fput+0xb/0x140
[  366.407534]  ? do_syscall_64+0x4c/0x640
[  366.411498]  ? bpf_prog_get+0x20/0x20
[  366.415326]  do_syscall_64+0x1d5/0x640
[  366.419217]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  366.424396] RIP: 0033:0x45ca29
[  366.427590] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  366.436521] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  366.443964] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  366.451243] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  366.458516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  366.465772] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:30 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@errors_remount='errors=remount-ro', 0xa}]})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2023)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000080)={{0x0, @private, 0x0, 0x0, 'lblc\x00'}, {@remote, 0x4e22, 0x4, 0x200, 0x0, 0x6a4c}}, 0x44)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x3ff, 0x3f}, 0x8)

11:57:30 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0xfe, 0x0, 0x0, 0x83, 0x82800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40040}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
write$eventfd(r3, &(0x7f0000000180)=0x8, 0x8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:30 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x22008ff9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt(r0, 0x6, 0x1f, &(0x7f0000002880)=""/4096, &(0x7f00000000c0)=0x1000)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000100))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000180)="76440df003b85bb51eca020c830a836684354d06238e5b2c0b2d0bb9e7f875ecd094b09950a2c164257560dd87431b1647340d6ccd606bc5f4f75a3108550cfd630466eb4cc9637cd4f9a52559e31da6e7dc2a385cc5a1283f58311c08cefb056abdb6d818ecb6e616bf8dcbf357ead7a78adcec4cf0e368ff74d2145305ac066d9c73faebce3ec7f9056519f0fb51fd85c99b58e41492", 0x97}, {&(0x7f0000001600)="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", 0xf3a}], 0x2}}], 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfd0}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100)

11:57:30 executing program 0 (fault-call:1 fault-nth:7):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  366.612582] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  366.679905] FAULT_INJECTION: forcing a failure.
[  366.679905] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  366.707155] CPU: 1 PID: 17155 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  366.715084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  366.724450] Call Trace:
[  366.727061]  dump_stack+0x1b2/0x283
[  366.730710]  should_fail.cold+0x10a/0x154
[  366.734885]  __alloc_pages_nodemask+0x22b/0x2730
[  366.739659]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  366.744202]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  366.749320]  ? bpf_map_area_alloc+0x5e/0x70
[  366.753661]  ? htab_map_alloc+0xaf7/0x1200
[  366.757921]  ? perf_trace_lock+0x109/0x4b0
[  366.762210]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  366.767166]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  366.772044]  ? HARDIRQ_verbose+0x10/0x10
[  366.776123]  ? _raw_spin_unlock+0x29/0x40
[  366.780318]  ? fs_reclaim_acquire+0x10/0x10
[  366.784661]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  366.790136]  alloc_pages_current+0xe7/0x1e0
[  366.794475]  __vmalloc_node_range+0x3f9/0x690
[  366.798995]  ? htab_map_alloc+0xaf7/0x1200
[  366.803244]  __vmalloc_node_flags_caller+0x4a/0x60
[  366.808183]  ? htab_map_alloc+0xaf7/0x1200
[  366.812432]  bpf_map_area_alloc+0x5e/0x70
[  366.816602]  htab_map_alloc+0xaf7/0x1200
[  366.820693]  SyS_bpf+0x4a1/0x34e0
[  366.824166]  ? bpf_prog_get+0x20/0x20
[  366.827979]  ? __mutex_unlock_slowpath+0x75/0x780
[  366.832832]  ? wait_for_completion_io+0x10/0x10
[  366.837517]  ? vfs_write+0x319/0x4d0
[  366.841239]  ? fput+0xb/0x140
[  366.844349]  ? do_syscall_64+0x4c/0x640
[  366.848322]  ? bpf_prog_get+0x20/0x20
[  366.852114]  do_syscall_64+0x1d5/0x640
[  366.855995]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  366.861170] RIP: 0033:0x45ca29
[  366.864343] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  366.872381] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  366.879635] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  366.886904] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  366.894155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  366.901407] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:30 executing program 0 (fault-call:1 fault-nth:8):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:30 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@broadcast, @broadcast, 0x0, 0x1, [@multicast1]}, 0x14)
r1 = dup(0xffffffffffffffff)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x7ac9, 0x1, 'client0\x00', 0xffffffff80000004, "3f22c1b7880d4ad1", "045b1883cac775e60c9d72ac6a6bd84bb6bdfd85b81493197df5aa6622e54ca9", 0x1, 0x6})
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000))

11:57:30 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000180))
r1 = eventfd2(0x0, 0x80001)
write$eventfd(r1, &(0x7f0000000000)=0xbb, 0x8)

[  367.031559] FAULT_INJECTION: forcing a failure.
[  367.031559] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  367.085274] CPU: 1 PID: 17184 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  367.093209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  367.103097] Call Trace:
[  367.105703]  dump_stack+0x1b2/0x283
[  367.109355]  should_fail.cold+0x10a/0x154
[  367.113559]  __alloc_pages_nodemask+0x22b/0x2730
[  367.118332]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  367.122855]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  367.127977]  ? bpf_map_area_alloc+0x5e/0x70
[  367.132315]  ? htab_map_alloc+0xaf7/0x1200
[  367.136585]  ? perf_trace_lock+0x109/0x4b0
[  367.140846]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  367.145794]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  367.150662]  ? HARDIRQ_verbose+0x10/0x10
[  367.154745]  ? _raw_spin_unlock+0x29/0x40
[  367.158913]  ? fs_reclaim_acquire+0x10/0x10
[  367.163264]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  367.168771]  alloc_pages_current+0xe7/0x1e0
[  367.173126]  __vmalloc_node_range+0x3f9/0x690
[  367.177656]  ? htab_map_alloc+0xaf7/0x1200
[  367.181911]  __vmalloc_node_flags_caller+0x4a/0x60
[  367.186861]  ? htab_map_alloc+0xaf7/0x1200
[  367.191116]  bpf_map_area_alloc+0x5e/0x70
[  367.195284]  htab_map_alloc+0xaf7/0x1200
[  367.199382]  SyS_bpf+0x4a1/0x34e0
[  367.202858]  ? bpf_prog_get+0x20/0x20
[  367.206675]  ? __mutex_unlock_slowpath+0x75/0x780
[  367.211542]  ? wait_for_completion_io+0x10/0x10
[  367.216226]  ? vfs_write+0x319/0x4d0
[  367.219954]  ? fput+0xb/0x140
[  367.223077]  ? do_syscall_64+0x4c/0x640
[  367.227063]  ? bpf_prog_get+0x20/0x20
[  367.230881]  do_syscall_64+0x1d5/0x640
[  367.234799]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  367.239999] RIP: 0033:0x45ca29
[  367.243203] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.250957] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  367.258270] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  367.265553] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  367.272831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  367.280141] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:31 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x2, 0x0, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:31 executing program 0 (fault-call:1 fault-nth:9):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  367.373044] FAULT_INJECTION: forcing a failure.
[  367.373044] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  367.385571] CPU: 1 PID: 17203 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  367.393481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  367.403023] Call Trace:
[  367.405631]  dump_stack+0x1b2/0x283
[  367.409282]  should_fail.cold+0x10a/0x154
[  367.413545]  __alloc_pages_nodemask+0x22b/0x2730
[  367.418316]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  367.422827]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  367.427941]  ? bpf_map_area_alloc+0x5e/0x70
[  367.432291]  ? htab_map_alloc+0xaf7/0x1200
[  367.436803]  ? perf_trace_lock+0x109/0x4b0
[  367.441069]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  367.446110]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  367.450961]  ? HARDIRQ_verbose+0x10/0x10
[  367.455035]  ? _raw_spin_unlock+0x29/0x40
[  367.459219]  ? fs_reclaim_acquire+0x10/0x10
[  367.463613]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  367.469096]  alloc_pages_current+0xe7/0x1e0
[  367.473545]  __vmalloc_node_range+0x3f9/0x690
[  367.478069]  ? htab_map_alloc+0xaf7/0x1200
[  367.482326]  __vmalloc_node_flags_caller+0x4a/0x60
[  367.487276]  ? htab_map_alloc+0xaf7/0x1200
[  367.491537]  bpf_map_area_alloc+0x5e/0x70
[  367.495704]  htab_map_alloc+0xaf7/0x1200
[  367.499810]  SyS_bpf+0x4a1/0x34e0
[  367.503287]  ? bpf_prog_get+0x20/0x20
[  367.507104]  ? __mutex_unlock_slowpath+0x75/0x780
[  367.511962]  ? wait_for_completion_io+0x10/0x10
[  367.516650]  ? vfs_write+0x319/0x4d0
[  367.520381]  ? fput+0xb/0x140
[  367.523514]  ? do_syscall_64+0x4c/0x640
[  367.527517]  ? bpf_prog_get+0x20/0x20
[  367.531336]  do_syscall_64+0x1d5/0x640
[  367.535276]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  367.540479] RIP: 0033:0x45ca29
[  367.543675] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.551399] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  367.558679] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  367.565962] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
11:57:31 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffeae, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00', 0x400})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000200)={@none, 0x1, 0x3, 0x1, 0x100, 0xfffc, "583c691125b22dd235727088439afa7b7932b2bc85658a06b1946d4ddab029cd71222071a3a56e24b4fb515470b85cef6eceb1d4bb931ba417b22880f1d1d75766ee85404a7c8d848494ffaca338e7e49a908074e6665fdf067fe93555339cc5391e150955592f451ecddef6ceba02d00db0e8ce4aa2d948b2afeb0ce1006ec2"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
write$binfmt_misc(r2, &(0x7f0000000400)={'syz1', "cce81a03918a06cb87528fd5ad0b0175a4b93854fab5a27283ff59fbb6c9987d449afb3fb947c8b4f4f2636c8f3971dd2460f321160eaa65ede408abfdd08bcd3bc47b72b9db80c2f36b4c7499f6068e84188248befcf81bafdf45ecfccc7556129d53f8cd9cb79d63f372a82cb8d0ac32ab9b1afe8f34dc1a845220ed433dfef47e2675cb28108526595eceb3a8ea7ee044b84e6d8b1a5168a8a115fb0862a168e1f7049783815f2e0f1f7d8725994e0c92a315f22b8b6043b53717fdc4e4d92902a5fdfe3c33e1e1dfe93459461192271bbc275d627a"}, 0xdb)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200100, 0x0)
write$P9_RVERSION(r5, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.u'}, 0x15)
perf_event_open(&(0x7f0000000180)={0x1, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

[  367.573242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  367.580528] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
11:57:33 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x300, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x2, 0x3, 0x101, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040005}, 0x1)
ptrace$getregs(0xc, r3, 0x7fffffff, &(0x7f0000000340)=""/151)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:33 executing program 0 (fault-call:1 fault-nth:10):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:33 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x0, 0x0, 0x3}}, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:33 executing program 4:
setrlimit(0x7, &(0x7f0000000080))

11:57:33 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8}, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae47)

11:57:33 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
write$P9_RCLUNK(r2, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001e80)={0x14, 0x0, &(0x7f00000000c0)=[@acquire_done], 0x0, 0x0, 0x0})

11:57:33 executing program 4:
r0 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0003000000000000000006000000080007000000000014000600fe80000000000000000000000000000500000100544950430000000008000c0000000000080007000a010100"], 0x4c}}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x15)
socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\t\x00\x00\x00'], 0x48}}, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
exit_group(0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  369.256028] kauditd_printk_skb: 11 callbacks suppressed
[  369.256037] audit: type=1800 audit(1590667053.154:438): pid=17234 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=16485 res=0
[  369.292133] FAULT_INJECTION: forcing a failure.
[  369.292133] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  369.336875] CPU: 0 PID: 17238 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  369.344816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  369.354184] Call Trace:
[  369.356793]  dump_stack+0x1b2/0x283
[  369.360421]  should_fail.cold+0x10a/0x154
[  369.364564]  __alloc_pages_nodemask+0x22b/0x2730
[  369.369305]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  369.374403]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  369.379503]  ? bpf_map_area_alloc+0x5e/0x70
[  369.383828]  ? htab_map_alloc+0xaf7/0x1200
[  369.388060]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  369.392980]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  369.397823]  ? _raw_spin_unlock+0x29/0x40
[  369.401953]  ? fs_reclaim_acquire+0x10/0x10
[  369.406274]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  369.411723]  alloc_pages_current+0xe7/0x1e0
[  369.416042]  __vmalloc_node_range+0x3f9/0x690
[  369.420543]  ? htab_map_alloc+0xaf7/0x1200
[  369.424762]  __vmalloc_node_flags_caller+0x4a/0x60
[  369.429691]  ? htab_map_alloc+0xaf7/0x1200
[  369.433910]  bpf_map_area_alloc+0x5e/0x70
[  369.438044]  htab_map_alloc+0xaf7/0x1200
[  369.442105]  SyS_bpf+0x4a1/0x34e0
[  369.445548]  ? bpf_prog_get+0x20/0x20
[  369.449334]  ? __mutex_unlock_slowpath+0x75/0x780
[  369.454173]  ? wait_for_completion_io+0x10/0x10
[  369.458832]  ? vfs_write+0x319/0x4d0
[  369.462534]  ? fput+0xb/0x140
[  369.465721]  ? do_syscall_64+0x4c/0x640
[  369.469691]  ? bpf_prog_get+0x20/0x20
[  369.473498]  do_syscall_64+0x1d5/0x640
[  369.477380]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  369.482566] RIP: 0033:0x45ca29
[  369.485740] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  369.493461] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  369.500726] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  369.507985] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  369.515250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  369.522517] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
[  369.560762] audit: type=1800 audit(1590667053.444:439): pid=17249 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16177 res=0
11:57:33 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)

11:57:33 executing program 0 (fault-call:1 fault-nth:11):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:33 executing program 3:
r0 = getpgid(0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = socket(0x23, 0x2, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r3}, 0x14)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, &(0x7f0000000280)=0x4)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000040))

11:57:33 executing program 4:
r0 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0003000000000000000006000000080007000000000014000600fe80000000000000000000000000000500000100544950430000000008000c0000000000080007000a010100"], 0x4c}}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x15)
socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\t\x00\x00\x00'], 0x48}}, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
exit_group(0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  369.719086] audit: type=1800 audit(1590667053.614:440): pid=17263 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16476 res=0
[  369.760622] FAULT_INJECTION: forcing a failure.
[  369.760622] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  369.792521] CPU: 1 PID: 17271 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  369.800594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  369.809955] Call Trace:
[  369.812555]  dump_stack+0x1b2/0x283
[  369.816200]  should_fail.cold+0x10a/0x154
[  369.820333]  __alloc_pages_nodemask+0x22b/0x2730
[  369.825070]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  369.829552]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  369.834735]  ? bpf_map_area_alloc+0x5e/0x70
[  369.839035]  ? htab_map_alloc+0xaf7/0x1200
[  369.843265]  ? perf_trace_lock+0x109/0x4b0
[  369.847493]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  369.852403]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  369.857227]  ? HARDIRQ_verbose+0x10/0x10
[  369.861273]  ? _raw_spin_unlock+0x29/0x40
[  369.865403]  ? fs_reclaim_acquire+0x10/0x10
[  369.869713]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  369.875154]  alloc_pages_current+0xe7/0x1e0
[  369.879466]  __vmalloc_node_range+0x3f9/0x690
[  369.883950]  ? htab_map_alloc+0xaf7/0x1200
[  369.888167]  __vmalloc_node_flags_caller+0x4a/0x60
[  369.893079]  ? htab_map_alloc+0xaf7/0x1200
[  369.897302]  bpf_map_area_alloc+0x5e/0x70
[  369.901436]  htab_map_alloc+0xaf7/0x1200
[  369.905588]  SyS_bpf+0x4a1/0x34e0
[  369.909647]  ? bpf_prog_get+0x20/0x20
[  369.913615]  ? __mutex_unlock_slowpath+0x75/0x780
[  369.918441]  ? wait_for_completion_io+0x10/0x10
[  369.923110]  ? vfs_write+0x319/0x4d0
[  369.927128]  ? fput+0xb/0x140
[  369.930224]  ? do_syscall_64+0x4c/0x640
[  369.934182]  ? bpf_prog_get+0x20/0x20
[  369.937966]  do_syscall_64+0x1d5/0x640
[  369.941854]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  369.947036] RIP: 0033:0x45ca29
[  369.950206] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  369.957897] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  369.965158] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  369.972498] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  369.979749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  369.987021] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
[  370.061161] audit: type=1800 audit(1590667053.954:441): pid=17285 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16177 res=0
11:57:34 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, 0xa, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7f}]}]}, 0x34}}, 0x0)

11:57:34 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9, 0x1, 0x0, 0x2000000003], 0x1f000, 0x40000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000340)=""/230)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:34 executing program 0 (fault-call:1 fault-nth:12):
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:34 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000200)=""/230, 0x7f})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080))
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x8, 0x2000000021d})

11:57:34 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180))
getrandom(&(0x7f0000000280)=""/112, 0x70, 0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000300)={r3, r0, 0x6, 0x70, &(0x7f0000000080)="424e96718d3dd7c587c07a8d8063c1ec9eabe0f9c23ed810e7a9dd384ff62f59969a69482e223d7ab889ef7f1973f81b353597e93d3ff25050b5b8fbbb013594557d2ad1837e844a3dc13158ad0f1731965a7ef24365c6166c579dc509e86fc220335f2220c6eb7e9f81c17a93f294eb", 0x3, 0xff, 0x7ff, 0x200, 0x3ff, 0x0, 0xe97, 'syz0\x00'})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0)

11:57:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x8040, 0x4, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_tgsigqueueinfo(r1, r2, 0x1d, &(0x7f0000000000)={0xd, 0x4, 0x2})
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r4=>0x0)
rt_tgsigqueueinfo(r3, r4, 0x41, &(0x7f0000000140)={0xf, 0x10000, 0x45a})
write$vhci(r0, &(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
close(r0)

[  370.406910] FAULT_INJECTION: forcing a failure.
[  370.406910] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  370.464447] audit: type=1800 audit(1590667054.354:442): pid=17322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16476 res=0
[  370.521025] CPU: 0 PID: 17312 Comm: syz-executor.0 Not tainted 4.14.182-syzkaller #0
[  370.528963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  370.538335] Call Trace:
[  370.540954]  dump_stack+0x1b2/0x283
[  370.544616]  should_fail.cold+0x10a/0x154
[  370.548797]  __alloc_pages_nodemask+0x22b/0x2730
[  370.553573]  ? kasan_kmalloc.part.0+0x4f/0xd0
[  370.558090]  ? __vmalloc_node_flags_caller+0x4a/0x60
[  370.563212]  ? bpf_map_area_alloc+0x5e/0x70
[  370.567532]  ? htab_map_alloc+0xaf7/0x1200
[  370.571958]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  370.576965]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  370.581793]  ? _raw_spin_unlock+0x29/0x40
[  370.585940]  ? fs_reclaim_acquire+0x10/0x10
[  370.590260]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  370.595718]  alloc_pages_current+0xe7/0x1e0
[  370.600031]  __vmalloc_node_range+0x3f9/0x690
[  370.604522]  ? htab_map_alloc+0xaf7/0x1200
[  370.608758]  __vmalloc_node_flags_caller+0x4a/0x60
[  370.613685]  ? htab_map_alloc+0xaf7/0x1200
[  370.617924]  bpf_map_area_alloc+0x5e/0x70
[  370.622061]  htab_map_alloc+0xaf7/0x1200
[  370.626137]  SyS_bpf+0x4a1/0x34e0
[  370.629581]  ? bpf_prog_get+0x20/0x20
[  370.633370]  ? __mutex_unlock_slowpath+0x75/0x780
[  370.638201]  ? wait_for_completion_io+0x10/0x10
[  370.642858]  ? vfs_write+0x319/0x4d0
[  370.646561]  ? fput+0xb/0x140
[  370.649662]  ? do_syscall_64+0x4c/0x640
[  370.653618]  ? bpf_prog_get+0x20/0x20
[  370.657417]  do_syscall_64+0x1d5/0x640
[  370.661299]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  370.666475] RIP: 0033:0x45ca29
11:57:34 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x131280, 0x0)
accept4$rose(r1, &(0x7f0000000040)=@short={0xb, @dev, @bcast, 0x1, @netrom}, &(0x7f0000000080)=0x1c, 0x80800)
r2 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  370.669650] RSP: 002b:00007f9da18e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  370.677354] RAX: ffffffffffffffda RBX: 00000000004da5c0 RCX: 000000000045ca29
[  370.684610] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0100000000000000
[  370.691879] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  370.699134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  370.706402] R13: 000000000000005e R14: 00000000004c31d3 R15: 00007f9da18e86d4
[  370.822181] audit: type=1800 audit(1590667054.414:443): pid=17324 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16486 res=0
11:57:34 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x2000, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000))
write$binfmt_misc(r2, 0x0, 0xfffffecc)
r4 = dup(r2)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x8040, 0x4, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_tgsigqueueinfo(r1, r2, 0x1d, &(0x7f0000000000)={0xd, 0x4, 0x2})
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r4=>0x0)
rt_tgsigqueueinfo(r3, r4, 0x41, &(0x7f0000000140)={0xf, 0x10000, 0x45a})
write$vhci(r0, &(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
close(r0)

[  370.925469] audit: type=1800 audit(1590667054.694:444): pid=17313 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16478 res=0
11:57:34 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180))
getrandom(&(0x7f0000000280)=""/112, 0x70, 0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000300)={r3, r0, 0x6, 0x70, &(0x7f0000000080)="424e96718d3dd7c587c07a8d8063c1ec9eabe0f9c23ed810e7a9dd384ff62f59969a69482e223d7ab889ef7f1973f81b353597e93d3ff25050b5b8fbbb013594557d2ad1837e844a3dc13158ad0f1731965a7ef24365c6166c579dc509e86fc220335f2220c6eb7e9f81c17a93f294eb", 0x3, 0xff, 0x7ff, 0x200, 0x3ff, 0x0, 0xe97, 'syz0\x00'})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x3c}}, 0x0)

[  371.033778] audit: type=1800 audit(1590667054.894:445): pid=17325 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16478 res=0
[  371.260752] audit: type=1800 audit(1590667055.154:446): pid=17395 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16486 res=0
[  371.324472] audit: type=1800 audit(1590667055.204:447): pid=17390 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16177 res=0
11:57:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9eca"])
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
r5 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x200800)
ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x2, 0xfff})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000080)={0x20000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0)

11:57:35 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xfffe}}, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
fcntl$getflags(r1, 0x408)
r4 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:35 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000400)='gfs2\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sysfs$3(0x3)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x2}, 0x8)
r1 = socket$caif_stream(0x25, 0x1, 0x3)
sendmsg(r1, &(0x7f0000000100)={&(0x7f00000001c0)=@caif, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="572f6ad977c7188c14bed713ec8cc1fe1953c5e61f2377241f0b1348e9524cc510ab76050264ddc8d49edc936b310cd982749e0011dd0e85df5bc4a8b6220df6a68b1c5f52d754b403b610dd5e57eba5394de5b3f9de89eb7fa399aa6faeb006713e8f2ae71d8aa371bf7f07f94054a0a70c2df35476483565c01077b1f05e20bcd04c01230d96056f04066a5404c02270f25b", 0x93}, {&(0x7f0000000480)="ae5b4c1cb99538e0b95d2acfc0bc90c21f1186de1af16566084afe8d4bacffd87b5b1bfa547d8ad6707d185796547d60c1bb880c6e3425d1a13545a3cceffabef9c926d5171bcb75966eb8f5e78d0d098ca7d7472c27f09cdeccee53e9c83547cb4b479d7d6f9e74b369bc8c7394dd32eae959397ba75828ec757de1b684ec719444104f131af6e7622a274a253e35", 0x8f}, {&(0x7f0000000540)="173df002c505c903a7ca08c6e5aa8cad331479d8904216871d1dcc5cdb45e74be36050d2934b8b0a00a34684059125dd5a57968f7f0adfe5c7c984a7da1ecfb66fc62ca1dd5ffd524f9f28", 0x4b}], 0x3}, 0x0)

11:57:35 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xfffffffffffffffd)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r2, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x144, r2, 0xa38b23d11157aa45, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe253}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @loopback, 0xfffffeff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x999}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$tipc(0x1e, 0x5, 0x0)

11:57:35 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/32, 0x20}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)=""/230, 0xe6}], 0x8, &(0x7f00000007c0)=""/4096, 0x1000}, 0x2000)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x82, 0x0)
r5 = socket(0x23, 0x2, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x5)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001840)='/dev/autofs\x00', 0x400000, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000001880)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000018c0)=ANY=[@ANYBLOB="014300fb34cc8044b1adb9163a2159cbf13d1bfcd3281d1b1f26d48f5e96ebdee5f64305ce1fd31bc7918160d3f727538a9a09305670e6cf0d953b17c8e7f523739694300e84731e5d06362875b48c4c3ee9006b4275f67d09816b16b5a7e36233d82ef00ea6df05715f8330921ae650fbb13a002e7c2bc34ed7ad84a70914b864ea7ffc8ca65709a29eb503e5cbca66e2c7a9de9bb90fa7330a5f4967b40165091e9e5735d0dcc250b9773bc071a0b29927c4f39de7da140500cc479de9bd1c0b9b8e6674", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r8}, 0x14)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r9=>r8, 0x1, 0x1, [0x0]}, &(0x7f00000001c0)=0xa)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r9, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000000)=0x84)

11:57:35 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc55700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  371.591804] gfs2: not a GFS2 filesystem
11:57:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x80002, 0xc)
recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000340)=""/203, 0xcb}, 0x8e8f}, {{&(0x7f00000002c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000140)=""/15, 0xf}, 0x23}, {{&(0x7f0000001180)=@generic, 0x80, &(0x7f0000001280)}, 0x9}, {{&(0x7f0000002340)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000002ac0)=""/158, 0x9e}}], 0x4, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000440)=@v1={0x0, @aes128, 0x3, "c3f290d626f58579"})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @multicast2}, &(0x7f0000000540)=0x10)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100), 0x4)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

11:57:35 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xe9c, 0x400)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @descriptor="68b3d70f0ab53c27"}})
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000280)="cd29ccf423f38b58b694ec5566c9b2e80146ef2a8a70bd58692fbcdef4c053ea4ab7e0b6b992d432ad00069d112ef2be77dcc24b2e844294e61b5f03c55898184a74ec04ac47168e816dd0b237cf3b1b1b92da9962cc44b8077f2cec3f5374c0fdd44541e9a9d0b9dd3a76157da82c8d5ac7e9090c5f560b082b4b3e51474d7a1ae32c4d49efc9d620f68bf44a8e6b8db0e428649a4ce9f13975a79cb4a64d8f51dfa285bc819d057c867e1f8e2539b4a06ee74c84752711ee2a789df153250200e822bb87f92cf81d558ddfc9de98a7fb73a76ad188a4280b14cf1ff143bfd208b5e3083e833c39b5af65b41d250a3eae41480442298dd3e3860feb03e47b", &(0x7f00000000c0)=""/15}, 0x20)

11:57:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000), 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket(0x11, 0x3, 0x2)
bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800058110308d9123127ecce6616f3f6db1c00010000000000210049740000000000000006ad8e5ecc326d3a09ffc200000000000000000000e000"}, 0x80)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r5, 0x80006)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
connect$netrom(r5, &(0x7f0000000180)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000000)={'lo\x00', r3})

[  371.726766] XFS (loop3): unknown mount option [logdev5./file0].
11:57:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]})
io_setup(0x0, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r4}, 0x14)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={<r5=>r4, 0xfff, 0x3, [0xda7d, 0x5, 0x6]}, &(0x7f0000000200)=0xe)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x9d}, 0x8)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00')

11:57:35 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8080, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1261, 0x0, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x1ff, 0xffff, 0x8, 0x5]}, 0xc)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffdb9, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/124, 0x7c)

11:57:35 executing program 3:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=<r0=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1}, 0x10)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setown(r2, 0x8, 0x0)
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x1)
execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)

11:57:36 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x69c401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  372.356756] gfs2: not a GFS2 filesystem
11:57:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000010000900010001"], 0xcc}}, 0x0)
dup2(r0, r1)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffb56d, 0x20000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008100)

11:57:36 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040))
r2 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:36 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000180)={0x2, 0x2})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:36 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:36 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102019bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0434, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffffffffffc2)

11:57:36 executing program 4:
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1}, &(0x7f0000000280)=""/79, 0x4f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r7, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r7, 0x0, 0xfffffecc)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/hwrng\x00', 0x200000, 0x0)
sendmmsg$unix(r5, &(0x7f0000001780)=[{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000540)="c1ff9698d2fa94723fddd1efccb7f37aa92b05fb9688b84786d4edb18f2ba591651cadc3c8f6dc860e2d2d6937298949ef20c16b98076db368b60fac8927ea8519163bce9b3ab32ab63be3bfbc9886db56ce9c59c1ca460b6eb7b256bc989d6810890c06a74a7196c545bd10844a9dc9d377445083b36ff7cf161d20e70d568c52d5143751b8c9f5529ab5c91f8a73b6820d035a2ffc9de3762dea57992256ad26bc1b147dcca16ddbd6960059312bb10c21887c0108dbb5eec690bb76dfb9c8d29dae7dd7e8872ab42a12e92c327a050d3d0741e30553334e45c192b67991da1010f7f9a8dd56dfe8f2e7ef6328d8a4ddc87d5f4028e9445547b7cd91c72e8972a5aea5dec44d0d3321c86c4619e26ec9ddfcc3120690983b02ce3e8fd36b548ada4541ddf7e19f9cd6a443438f37a3f1087d6b9cbdff453c079426d64ea8c792b2d021d518a96194de7ef378a7efe7df8251513a367583b21eb7a29f46dc59dc46c97a1a0ef925c94ff7fbc94de339f2fecc75d7f7d30631aaa14072b3c8a6032fce1ea9e137adfa95a156c0b2f32bb18f5128db36f9cf58accb66e62d06d47ad6992f2965f9741ca1563bae635a1b46814ff311f35ca11a5acf895b1e7c4f2378af37c2648794f964bd286f458b20793357fc07c64a27a0db28b12777ae4eb56c16f2031c833278f427eed7e2794a4260882b947c2d6cea589c2d0af9753b459550425a82bd2eb5644423a9cb57061a2446d31707686b1a0245cd6497bb19291ba159fe0cea752650aae5f841892e0e891bf3b44fab9f70dcdc7a6f19cc6715a1ab2786e1eb897d419f68c827fcb9666c443ee3b1cfe9384485e3543707b0e6761b244bcea9b560840d835a92c08685e1416003d2557ffab60187276edf48569fc1956bb47de1345f14d96afcfdb7c6c49a672617959f6309412a7eab380c41ec5ded628f60af0b3b6b88fe6d085da3172f5af96f70682bcef713d34bcb6aa55287f63d828a21e6d86a54d3f9e750c767c833ea315b56ab1684a536c6d1ddf68e6ba9b4d1bc9cc155a5473b9b2e315cb9c746efa1fffa60624cc0102d8fa0065d7506f736ea08438059f55f36ab815dcd11514a3637abf4451fbb02629429a3c8a11dbc9e311d962ceb71ffdf9dc857305d845f514038bae7e3605e891b993f0582c3d00a2e949257cb40a347bdaa309201eb4f6f2640d0350f312ff6b06f5e1511230331be020b00b1ccfd36a5d18ee2392e2adc67e5b72ec39c57c5e74a60ca231e57e472f2569efa44165e12d151d30a5e526bf9bae9c885ea2812c38f6996e5707fcf78297ee1fcbad26d92188f933e9724d81313cdc2de0acedbc6e5a36d914968f2953ab723c9c061b685bd6871c85eed1188bccc8819dd089c9feb7f9586721421df56eb4c6d455829f2836c48b646e0aea014498dbc8b74426fa808f5e9f0ace8151b9bb69efb246a48d621565186f953d70563130ab413dc85cefa0c04d4b5d2ca310fb26e8f008e830d5dfac5a9e406c6d2f8bfde13e9ae2e52356d2261a0e384b82de2d5ba42d7d35dfac8301740fe7718ed2e85d63a1883023f80d55c6d0d9ddba51558b8fd87fcca94a5e9282a6c9cd80551cd1663b84fcfec2f3b383b14518d356114bbdee0f4f5d47bbdd76d0384e2cf3319695ee3c62772fdfb903f3df477fc89304e1125cc2afbaed5c9214fb9b06d04c550f2d91e788eabb78966cd8d7397da46399d8f614cc7e4cd951cbe728ff0b9aaf02f40ffdb5d2a0733126bf3bc1be16183d9055365af1afdac89a9c143602d76ecf090363470ca3519d6405dab50b415bbf97d9f13bf374fe2601c5141e993ca7146efd4ed28a84c8e088375bdddce68ddadfb2d4c36c33fee05112976489457a455d26b799cc8a47a7aa0a387279d061aae17e08a0cfdb41102a0dde41a7aa3e5e7d278dabb6fce274e2a07bb994623e40ce59ae0d051d22092a5b89220c4d05a1b91b1a09335c2a5c75c8a3305f1c2cdf50181a7ff49b49a8a7b4d0c7519c27244f97a34fa573f8ee29c9716399a73bcb11b8df6ba74e84b00667ec4ac0bba6044c2942b400cd1d9fae051c5b11ed0c38797abad5bc8dae166cdb245a25a779dfe84d9c116ea03257a8eb1c92deafdc04f421151af6888599e0c26dd85a0cb89969d95bdfc958a7d7b02d340255de7485982a8c6c7ae6259f1e9532a6e2fbfe496bf6242805181b8d5f5560964b3532b28cbad3d5ff0073aa0913f4246f6ab707a4ce6ace2bd355310e56715c2b5d9afcd4755d8c1520f84281ab5ec14e4297b5c1ec0e87ff5ed60fa17bb799bb975c75030a899300cf5c87b252f6acfa3fa37c192b394ecd52588f25dd6c8448e53d0e99e9f0e9b58dfa6ab8e2e82f2e304ab7c2353b71522aa557d0f337aee4ad3054a185775fc2b6f7f8c5ab58545bf70add5341ecd7690d056589d4123da04c4b7e7418c28d02935fb4597b957167e34347cd66797dc960115f6b75be8a7b616557ef379ad3dd4c27129fe7080fc47545ca41569844eaaf9c89693832366b6eeddae62c8906bd25faccc35b24144eaaed92278fb37727e38c8277f5deb05b4685c73f80c29274ee79e77488447c20ea4836c28a70b67672419a6934e5a23a77a8476ceb296c7e069bffdd228c74239a1ca3f037bc5a2f76ce6c585c606a02a9f22f8fb328020cfd84e7d4c58a50c662abcb7251ed1427d9bfe4bf0e30d383781a833eedeea572cc32a991cd31f5c9b33a9a354183bd63fd259474e155620f9fdb3c35cae60b4c933adf55bf34ef59130bbd7c2f212e5cb53bdaa94154fcb69a37d936f15ef1e48b063fc113062e8aa5fe04998e2205e92cffd57cfcabf48d84c2a35fd7e66e191318b9043c3d00169295a4ff82774047c63a50ec115aa1b6f040577320b24f837f6f92e1558302e2116339f438d089c3dab598d1efa635f14ae3571cd2556004c5f9e96dac5ff467d5267e14cba22142a73612c2912b232c0cff4c57e7a5673f0c0c326cc70d4fbee3110220b8baf2c525de5c1d0124d242a82fb4de8ca427404515ecf19af35355f0e36e25b3eb2d2a287ae43d455bd596092538865627ec249b83b8f8b332903e3a8fbf51a9ac1a78d7fd410013195d4364b00f1f82cda8ee6c3fb74fc3a2a3a4a745ad283452d55a2292ec4b1d58f076a5881ec805c231edb93cfe2dafee4f2c6a1640f460302c443d1a3c0d3d975f13c7b487ee8a67d793d397a8b8652bda24d84c84e89b493888ce6af9bc4beb11bd56e7472a66e24a073fbf0ffc3465b698c1dd93a96ff82b4c98e4e9770383235f3d9fe752c6c5e32d238f0f1477510e294492a0bd86502ed01625655f1c36cb65cd2d05b5afaf7f7d69c9c609ca90efa871c74092f03c9016cb95756aaefd78aeacce073ea9bf7818bff2a1a74115638d204a57448203cc0adcd78de2c04b5e99ebc812eee846500b940fff6c81b17ccfde4fe7c2f70cae5e7635fcedde656d17d681ec9a8b162a1114d7da638c874cf76008a046dbecfd1facc89803a02db54da6c6d55040465fc2ef0a67b1d57e2f5322710a60b529ea1b9d9dfc0c5e7361c736fd453ee315b2e886e6abf93f2351124e51e9d97237dbc4c9780c8a1dc73b6a0014725fce9695cbc39dc0b8f13b3434b90463665b853f0f330a684151211c40d09b0484f851ecb642c8b60c7d220dc95d32296574dcaf001cf90c0bc06bde92ebf7e288a3f47931f8df39919c2c5d6dfb722c983cfff735a7baa5d7547c57efe8c94a61553fc00f766e76caeda1ef8a11e6c2301f338342ce58c4814d7716be6087673999f2089204b6353a32c4b323b069dcee8119990741a6d28097b4ed89cf1a97df686e4bba6aa892c3fb1e245038e8b2a5557ddb4fff60f4db985ed9f51724d73ceaf33d422589ba23070383a63104fc894b6d60784dc347ad0dbb0438785af75098915e85af5696bf3efea1ac46f64efedafd8e9ae5c7e6bf129c76c5c24d717ca71b16380470b7c03cb17bd2bfad3cb6a2a3f0b85ebfe8ee01e1a1e9ccd7dc79388d72e83c2138082fa05d8657219f74c524a619c08ec5e393cc45d58dd520a3dd5c608297c5b161279a90b6df70e07dc1dc7d37ace29b758cadd9a445329c837a76f736f4a7b6ea3d0b0529cd7c72ba59808c58f46fd58a5e01012d19f93998f5f260b6d1dd6d4bd25b906b411144fd89c8c22eb76a1551610e2a8050c62f8c9e0086f2d117a09d21775d5f410fbd980bf875174fd00331c163ccc11e30175c64dd969b32911835f10bdc0a3f6e696930b70e0a19b36c8a7e559d7f7e53f3e4df9b7904883d3fd96e8a7ad278601dee6d46ffc4bb9c3465249c06783e3390da05051e9362b03b73465f83d6ce72944d59942ac2f09c8467fde20f12a9850d7d0cf266dfb2c661ce5c3144d45ac73881a322a91086382d967b91679473ac50728a780d2d007c880516f4de842767be92eba91129faa44fcf3852f490cb51c0af14579840c57dab8ca0b0e292b8b8a8f818b9762a416ce9081b595be5b4d1f17b0c3636df21aa6c42bc6bda5e6f436ebe65a5028dbfedd92da7b0ee8c533399e8e1f2facb0de10ba18dbe6c25f27d5e5c7c85362ebd76ef0519796736289b6112d7cc07fb75c6aae0e3b0edeeb7e070368ff82054e4071265ad07ba4c81a698035b494912b05eedaf5f21895de94b3274fe68a2baab5abdc78e5c0449fd104f865cb8f15a6d4e502f8348ec3f50e0d8e647e0450e04579bd3c220449b0ba5af8f4096e6504cbabf8b6b71983017960e48ea6d7ab4a30a736f795069cd2f4227d122f1a848671cf75c851d4dbe8ac2ab3b601902f2f4f73b9a918dbaa0d1a8e455bdf1e125aab2648c80b425b44e08187353051ff6f0be6bbd6e52aaaf6a8521e1758ba1b25b796518a868efb3075446c69fb250075de78e001ef23158339ff73c0ad627aa43615ef0b83877be0d43b16bb56f3aa7bd9966885f5762a1589ef0d8c363bc3ad664612c101e9324b29b45ca935424fc6b4b40f8f1e4de07e7f1797628f0aef2225142f4b14d730b5dc69421cc2d67f08cd5b04ead79a1da2408c7c075756b73c25bf7df4eebbb5549baa84b7ed1c0413a70801193501a0a6f783d3db3ee8b87af1c8d8cdfae3a8409650ee0365e90f003b9452de108f106841b8aede4636202e1d2d3d1f9f432d23d4d30851812c663e4ab821bf88b957be21b9cb0308eac75a3206a81fa1564891365e64df9d8c4e1c22f1a626e9fc6df395b851575b9e4d2bd527cb7eeb326f576a316c5042eac27fa890fd0aa100d536f57c6d13e9cdf6083d5fc94f4fd7668cfe222d2e52c00224e93309753bcd9331fdde2c5c34da000255916174931fa1b6a01871982499dfd97bf7c7c856bf457f6a4165200da2346a6d79dfd64dc333d5b46afef1b3b7e5ee00b7efab59fd9c63ee7af8614c6e875e198773e0d09af944772553455bba418eab1510158a611d3f0bacd701786dd3607e56163c2713ec1eaefaecd25d4336f8eb1723a9499eabc3a91685a297f71515ee168945f6a66da41c6807946872e1d5d9faa623e0e3e2fe27cc38d3e197d33a234cb0564d4baf65cbb01e490758cb0cd3f043ca24eb0602eb2e526d4d029119c71ba75d406dfee7547a47f72f06e87dd30c1f618487056479e8439c6ac670334e1d584fde7ce88260a8326fa418fc457bf708e22bf9e4801b437e0d4c641aad4b31fc14b7961174b284145cad34490be81068479e3e164a08be30ca5240be9770cd824e5651f0bac4d6aa60460e", 0x1000}], 0x1, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r7, r8]}}], 0x80, 0x4008000}], 0x1, 0x8014)
prctl$PR_SET_TIMERSLACK(0x1d, 0x7eaa)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3f}}]}, 0x2c}}, 0x0)

[  372.759749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000001280)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
accept4$netrom(r2, &(0x7f0000000000)={{0x3, @null}, [@default, @default, @bcast, @remote, @remote, @bcast, @null, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  372.814885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6001", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x20008801)
recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000580)=""/157, 0x9d}, {0x0}], 0x4}}], 0x1, 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
open(&(0x7f0000001840)='./bus\x00', 0x4040, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendfile(0xffffffffffffffff, r5, 0x0, 0x40000000004)
creat(&(0x7f0000000040)='./bus\x00', 0x141)

11:57:37 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
userfaultfd(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, r0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb00059efcc5ec2c6fa91b5cee007000182e076e21d0163a365248c6ae4df05162fabd888478a62cb3f4d579f8a815e79997b48c928c9444fd71a04a081a00000000000000376e561c558cf0429393d5f53e79f62a6dc201ecb64d1e23920733a64ae06e6bc112df692409997a04811f80f946d57abdc96e822fbdd16bad6d742b7025d8c151d484f51f0558e71b63cd8d33eda163c4b36786ff04383de388d3e6df"], 0x0, 0x1b}, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x2, 0x4000}}, "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", "20fd7a739439a3a98567256034f6c4cd77ff878553196cd58a0c7c176dde49ae784ef83ab4f586394178178f7a82430fd4d9fb23c2796ba325015d854a1f6c1536095e2d384f9f8183aebd378b03d4cf47d884460ae7c77b9d751cb35ea0d2ec6b320924c3ee11d4d1ce1500ff1478df95b431c5d3147b197efd20a057e4ae92bdfd502b0caf3df14bcac03a13bb2f7a62d4b220a4bef8718edfbd7431a7110fdf8ba931e98caa7c9cebac469624a13c613bbf4c52244faf82fd9dbe4947fa89ced32c2ff2d95c5d6b52200292e4b3cd31ad13cdbc81aa1f4212b0c2c7ef3a6782d650fd77d26faccc4447bd1cb588387f211f5c1d4876e674c0d45788c992b84365cd7c9c161b7c88f3733068a1d4aec5676967c3dbcb7251a16db12419da572ff1bb8773a384179faa600e898f73eca9b4127561be4abf3b29a25f5ddb7273803820006314f68a0a9b07ad26a8a272bb0bff16ca2fe222a61a4b64e9ff12a6b80b31547540be409f7c1279da53f0e74b61158982804b6b7f3d63fb36d9b02a7a0cfa3a9b026b1e9605994266e14e4687088436e976235a18ad45a8170dd1e21dcc0ed32d5cf2767a8375cadb51f71086d79d10cbd26e4750b36c566204d20272ba9ccc2c1fcc5ae8516e6bb8e5faad74689ec44d5fbf9ac2d457057438bd8acd5f3b8c3f4beb96e37c2a262bf308a710660c5dc30b24cf8808ea85fadac4a5406d1b6efce3086b53df2b4f81f730843898e21b030f67f6931c2837cc0c8d4cdc8a88d78c80009f6162a3b7787f59e9b31209012086a9c5311687766f7286d730b7e4b869e5778ef42ac015e152e01e1414c78208d6b4a8c41a543921ba29c270357e94506ed8678acb7a7f5aadcd89a53f90856ee215484c1b94805824016936449cc97f08ba8ce396ccdd7e79e88503752fbdb407a6911ff38ae361d2f6854fe536bd8689f7a609d5e5d0abebdd19bba11218baf4d790ec9737d46aad3d634390fc60fedca7401565b36c6adbe468b6a48070e1a7384b5708f2c64f6777b8abc594ab738b500a64820e6ac0a3b31f5f807fe04b38bd7975a0f15bcd3d02e832b997f5ea6e88c0bb354e80a99b1626e0ffb96e934b928b69f19e75967c80ff5765c7d4f5606dd248b41eba1c80d9befaef58445937a043b112246ba7b2e6dbbf040f81d39033750978d3a32cf7ab05f950140201dfcbeb4fc98249de740b2484e191649823523d9b374bbddaf569ef2ada9d41701be02a09f77d9f983404fd7b61c60328f2f9b5f3ad2a1d10cb10ab1d49b9fd87c9c8f5b686f62ab9f0ec68bd247693d2ab91b12c26a1b18c0345b2914ffc01ec68ac9ec05439cfd0bd919524ecf687587934770dff1112275a9589c458197ee14a48267d7961ea451b065e74b0df1b734dc5cf50f14b59a79dadfec130fc7e2296e668b8a92a26789286d1ec6d53ad3c3dae38fdea6accadc54e89c0d0c963c858b5d973278cb1857c9e89e07dcce58d5fa67adcd85c575a902af567f5291534b4fa30a7a0b993f3d90aa71e367c978f44cd83bfdc38505eb05af742cc62d38cf760bc7df4fdcd7ef09cec7315be11e5094b1fcb7a1803400ff844bc67fd9474ff1ae559c36f17c96842457ab2b12ac271bb428cadaff51ef21eb80f8462e68ad2b82acb7b24999096a34062020122e3ff58bc20779bd77d990f017d85a67f69865356cb815fc26cb5c6b6e70fe34c6fc5d036693bd4947d9d4737d4b47264696ec28193a17f693629c3cbcd602299879bd72cbd4956df632ea00ad4a46d94231adee5c2dad4ac2c9e23fde4f7ed82071a3def3d9e79d51155ab4173fe850da114ce9bd034bed57aea28911abd30c8407098cb3f2793f68d69e4542e60eead8dc6abfe83cf9eabbed249d5bbfba19da084bf5eb2b60a7937a6f969279e16c7d04dbe4323b138068d61988cb1dac14c4115b81bf1cc75a66995177dec2c83515d7794b4106aefaf80c10e4fa9833bf3f4e1d26399787e8c98a3273c35d2f60b6162b46c54b11856a804cedebd1e053677bd47c2a39e1e50913b9c9d9177040202afeba786a2c07a4b88be93e20ee93fa2bbc4ef8e163e3ab7d5a4f090855153684ff0da2ee6da6cc9829ac3989bb89a576323b62fbdbf8f3547d4e115865eaa624f918db2b37310cf50965e2f4a373f3fb5cb0b0b638c61b07150b44ce0f8daebb3b8fe43776d4a93a3ebcf2e6986de87d68cdb9ae146e6301073ecea343c111388961644a011d91293c859040d7c62fb5395fbefce2845496cd10a06b77ac43486ed7708dddc830bbd77e5d77a4b52057e86bb2e8e7de5cbdceb595c7b3d8aa5f7ee2c427d7dfb22071ef7fbb81211b103f2718c6cc14a40aab77645d3986fa8ee117903520c7165a24a4573b16a86502fe574488d02770602fc11aa1ff1922ed77ac5b6a06c9d412e280fb24f88ea0c4dceb6229fa6018944cc7bfadfa25d3ebda11eb3fe2e08a2fa1b1fa242af13c423927d87dddcf95fe83aa947fb82426c108eee3154564f26d98737e316a941a9bb0cb1044d8bf0aade5114e3d5c9a1c6930b978c6b26f916762837c42f2d67a0bce92139170cebe7dbdabf84a0cef04c49581f7c1a4b7d0ff3dc404d0ccdc4adeab4545f9b7f7507b29d9cfe72a19f7cd93858d6c47b54e36c69b601f43a81de71762a1681b3edd8b7feeae45c88ed67d31a56f0ec63f8cff36e05178d437efa3ec22d53d6740a65075c4d57ea66a0d75c0175412a187f1c897f7272e77139f4674dc4300ecc43185f0c71e489793ad30e730925809390d99f8fadeb6c6b33a7e6f26b922c47d63258ac143c35a0e561a002df20124e26c2989376fe36d3973f11203a96318ac6abca3650f1984e1175798fe62ea03484fd2dc6f8c84d32f900b4d2318d50a5e78bc27619aee819abf094639254c4c8d77968713422cc156c5c8b829aadcba6decebb66b9bd168395b7909617081484d56d829e725b3c3b26536f0087dd3ba980c4e3d5f1c7abb630133e776608d3ab4ec69e10cce636b2e15548e444bc62252cc63321b696facf25349670b9a284cc4790c4862d546a3a0fc4f3aeb53837d2930943e05839539f5606915407cd65af869e2d61615bd44d61f36c57f144697061ecee94862aecaba5c0e1df55a20c91d8009045e3ec30dc7eb95acaa198a3655f6cc4f9eb2829f6112b961235e910276ade5150a8cd4f4751e953128e4ce25c8fd0790ed94a97a67b86518b238da3a3f069f60fa9025b1f9e405bedd77431173b87f93f7117badf60d17a7a89d2faede716b3d2286837d226f9be4b8631fac5511b45e36c14c52a5329fda93698dcd349d8e9da09fc6c2947b8490d1ef5e50de4bda72be56edd7fa836e25e31dc348bd0594c1bb80870ec60eb20f07cb493c3552c17b2f3a2b0d7797461df71afe25b3ca2ef6be6e5c3626fe21eb8aad1ae6fb3226b830bcd225a87591c132bcf83b4e287e5842d6507174d41bae5b3a24cdbb6383bc960d3fc73ca3b2bc42db5bfbe54ce55a4957a646d8917360cf5d755fa6a8fff7a2940741d4351d3b0ba8efc9c3553daca10796ca7f14fedc3660c5d1b8d723a9ea89234ef1eaeebc953b96462791950ec80c0bbd09ae2d415bb325ae6bb4f7567f4337c96f2adb465135808c1f0da16a72ade83ed8747c4e60cb51ad11f40c2c80f5e091d34c6fc9e6c98802088eaafbce2a2e75d69654a38406722a27f130f3acca14a7d9fc047303cbe29690b1284a0f433a0d77f5d0814ec82811c1793cf65c9a1221cdcf54fb344407c6a3dbe9e4cd4c0b71d3404f7fb8d3d56c02af809a928fc695819007836c1be5684dc35c0dedf480948aef759a4f067790379c65cd64bd91c372b8bb821ed864e9ba1544908b09686dec912206f8090daeb8587ef0b3b8f498aa21f87f0ae7aa39d8b2e162ccf937b84e2370088e8f2618fa5793333046318c3ad82a3f591cbbbe4b9bad39cf97ce096e28b05dc0dbd2ac54e67add6166c6b60917bc229b8c8c432e64b945954240ffa4f4c7855fdb6be672db5d301cf53d594181d59facf1ddd84af70906a955ea55a0688d98bea4ef40ff102f888067a4862e3baf06dc5e30b120b7522b93d28c0e9befbae1fa56dd665f00551f6b7ae1201a8fad792e6e66f6832ca65f8cd017448169b40d5e43f06ce8582a20b609aea0b4731ad2d9369109f9814d312a59526b011630d972ba6cc3a428461a64cbcc7b27f90558b8124f2495dc5e115dfbbc57c234c7c34d6814aa4c8b9063daa616dff532af2911f63ec168e75f3d6f1fef2b86cc1d731c15de957bff6b222faf2ed02defe4b2b586ba743178afd61980b7b650468685798dda6711df584346ff6f0aad10e503392cd7c7e93a30c42517bdaf477c787b7010dc22ec2e6c6bd99c941534c23fd33e3f953f3ba077fe37b3cfac6e406e0c0062d386af6ea0f38fdca4dc409f2512c444fb06e2941ee7848c14be345b7d0aca01fc9c76181dd17ecb9beb3977260c177ad2fc73f06ac7bd53b9c99486ce1e44801b78fa8f4937557d71ea80f1239ad6d65608fb9353e84ae47f75470916aee95b60c90b2a84e9fb4f013c67158944a555510d84dc72455d9ed93470f87a5410d024009dc2c2babb701d8a17273ffc17553eb88626605dbfe627ea2044b267fce7523160f981e1cd35a570bb8e5f798f018e1c68c80d4916a043b9bf938a33c92d16f20097461483ab543a7f1bc8a56dee67848c666fd34caf6d4b9bdf17dd1c36cb8020683af47d29a057d14ffb73632a4aa4d5dd9139650154d238b4cace5254489f86dee3b844793ffa84988fc718bc112f125ca8608b5dd602f500fcf5fe96f14ffd6d61805e5b422dc5e07e188746452b012f6da313bfcb40e000fc85d7836145c7c13087ccfaad0b4b7a166b00125856700395e29d3fc322530e89d24fb62755191b1bd45fef7a9db0e61ff2fd1a1c81705d5618cc775d9d2c11f7739b82bbb01dd9ebddc03ecee3c42e71a8b287c6b73d44225f9ac2b49ee3db248e4017c22710a04726575e86dc6d3b179bae9df14bc2be2aac3b2f90b686fc67c233fbd53244aed27214e31b6ba2c4fc32461851bcce6ea8a4004ff3267f36ef160d7298a4001cda4a79638f528e4af839d34b0834777fa5aa146c553723eeb3179941bfc6a4410fb0d883e172c22d6780551cc87a0826a4fd38fc3f90411b2e0944f32332fe7a9fef6fea588313da042612c66eda8a3e2196980bfa89aa3e6bfe29636931496d9b374fb7c500031fe42ab57cb2acf64fcf783b9ca71b4bb98616dde3a907c520f725bf320c13b178214e173acd19e937f2a060649daee92de0d9f4f9b682a98e3ec4e458629704522e1efe7e7f2fb088a1a92179f8636a923cc628cdf0c146768b77cd0cad35800765fb649610bdba6498920ad6d3cde573ea00f70f56fc76479815fb3c5bf7dc10311d2794f95a0eb6f43010ee278c542d190d127a18ff8f812954141dca1a4daf33067b3c3b1eda706a8a20a15daf9730a2f521258c792df96162dfc9ed00c583684229176e188ea18a26512c3da1064c6120bd6c0ed9115e4b38a88d36aebc19b09bf7ac87af996e4dec9ecd35e4523bb7206cee568f32b522aec04863dbd995a1df1874184f1eeaa6f048948a0db4ddee367efe0c397bd9f803f17b872bb3db70aed2ef12cb546d91727395350114ae6e2fe5087aba774ab850fba292539f674678204a14b7a207315274afa9429800d7f5926fc446f0e1007e93de8543dd810d4cd8812470c4ec6918b79"})
getrandom(&(0x7f00000023c0)=""/179, 0xb3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x4a11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)

11:57:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101202, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x200, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0]})
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:37 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:37 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KDADDIO(r0, 0x4b34, 0x7)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r2)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r4)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r6)
getresgid(&(0x7f0000000040), &(0x7f0000000080)=<r7=>0x0, &(0x7f00000000c0))
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r9)
setgroups(0x5, &(0x7f0000000180)=[r2, r4, r6, r7, r9])

11:57:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
preadv(r0, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {0x0}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {0x0}, {&(0x7f0000000940)=""/71, 0x47}], 0x7, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="13c4b27760f3b05808233278b87e39b6debd1834c3be21cfdcdddb7ac8e8411d96d8c6ecfc77803a691311f070cc01cf96ee99ed910fa835231d168b7b4b1d47b489116cbbeca0e5d9945188c0f1bc943e29744a7388d6a3afa80dbe93", @ANYBLOB="aec84003000000e4240d58167d0361c1d67b48db42afd4044e6286fcbb324e000000bb00"/45], 0x9, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f852f726469723d2e3a66696c65b02c776f726b6469723d2e2f66696c6531"])
socket(0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0xfff, @mcast2}, {0xa, 0x4e22, 0x0, @private1, 0x8}, 0x5, [0x2, 0x4, 0x0, 0x0, 0x5, 0x0, 0x81c, 0x6d]}, 0x5c)
renameat(r3, &(0x7f0000000180)='./file1\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00')

11:57:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000280)={'batadv_slave_1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}})
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x1}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010f20547000000000000009d0000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007850000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@TCA_RATE={0x0, 0x5, {0x7f, 0xff}}]}, 0x3c}}, 0x0)

11:57:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @rand_addr=0x64010101}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040044)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x42}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000010)

[  373.821170] overlayfs: unrecognized mount option "lo…/rdir=.:file°" or missing value
[  373.882841] overlayfs: unrecognized mount option "lo…/rdir=.:file°" or missing value
[  373.908683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=17651 comm=syz-executor.4
11:57:37 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9f1700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x44080, 0x81, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:37 executing program 5:
fchdir(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000580)=""/157, 0x9d}], 0x3}}], 0x1, 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x800}, 0x0)
r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x4040, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="77883082032b791b6a5c4fd7a85b6fcf", 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x141)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84a80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x20000880)

[  373.951764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  373.970430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=17651 comm=syz-executor.4
11:57:37 executing program 3:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4008066, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f0000001440)="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", 0x566, 0xc001, 0x0, 0x0)
r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x3f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00')
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x8400fffffffa)
sendto$inet6(r0, &(0x7f0000000240)="f11d9485945532b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721908ec5fd0cd4fc40b461afc79758bb2ebb7ba7e67fc49a3d4bb896b2", 0x3b, 0x10008000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="c5f4cbae2a00003a9c13", 0xc, 0x260000cc, 0x0, 0xffffff88)

11:57:38 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3f}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001600a10000000000008000000a"], 0x2c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
close(0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4, 0xffff0a07, 0x0, 0x9, 0xd2e3, 0x87f, 0x8000, {<r6=>r5, @in6={{0xa, 0x4e23, 0x2, @private1, 0x81}}, 0x8, 0xfffffffb, 0x7fff, 0x9}}, &(0x7f0000000040)=0xb0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e23, 0x8, @loopback, 0x2740}}}, 0x84)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

11:57:38 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
openat$cgroup_type(r3, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10001], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:38 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x7, 0x1ff, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r5, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r5, 0x0, 0xfffffecc)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r6, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r6, 0x0, 0xfffffecc)
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
io_submit(r2, 0x4, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000040)="01dee1e0c1e8e3d961ca9c73f8101e4993815f6495d1723756adfceeaea72a795f3c93ec844ab587d3181761a39b5ca05bad23ef12a4c0c498324f21553fcf9dfd01dcb0ac4f4089769f3e627c1b0f707d788d9cf53c527e72841de6650158b139ac41531286ebbb530cbe6f75f2dc6831887a0d72e878eed9192b1b3dc9e73920b288673ef4bd1ec97b5000952780610d8d7f725b5f81d9204317d421af0aec54a1072d8e2f3fcb1cfb070e123a211cbf334b00093c64ff01b34b449dd8", 0xbe, 0x6, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x80, r0, &(0x7f00000001c0)="a13dfe65c31b54275f6fd3ac84638b20c796f846f7a26a533d8049fe4faf977e0c282319c6af13225dfa89735285a18810b16d5b35765ea43605da3065fef12e8d5659c6cf6a456abe866ee6fb914c43cb8154a12e3fb26d1f87b0c1915813df37e62a454b0977cec2383a9ff3feaa10037946117094ade8ad586e1d25b651aa6c3a1566eb055d093e2703530ad4d15a94be4700e889b8bb691f229bcf16468da770ba7ce88e5742e8cd360dcc11a8142569546a7575016a758c1d47a79049a7acb272cdee5333750daf3fa75384e33e4ed802fe5ea4d44a7cf733fdd5667edb70e8ec55e473a1b4e9465e", 0xeb, 0x1a90, 0x0, 0x3, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f0000000300)="eb07bd4a3945f86f36199dcf6853e1c378e2ad8b86e65f4e3c14e8437cff007ca3c2959a7d389cc81be9b8cecbbd807b977e0929a9ab6d0311a170dec46627baa7858b1e1320b696dee1289993b99a090d5ff59c43b3e46337500ee5d1f678d8cb315b808f2e4ea0b80c3067bb6336e5b87308e957ec8f0373464493d17758", 0x7f, 0x3, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7fff, r6, &(0x7f00000003c0), 0x0, 0x3, 0x0, 0x2, r7}])

11:57:38 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004808, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x4b47, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0xffffffff, 0x7, 0x4, 0x40000000, 0xffffffc1, {0x77359400}, {0x2, 0x0, 0x5, 0xab, 0x80, 0x1, "f8aba6de"}, 0x5, 0x2, @planes=&(0x7f0000000000)={0x46, 0x8, @userptr=0x3ff, 0x7f}, 0x6, 0x0, <r5=>r4})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))
r6 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x9790, 0x2440)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x31905e13403123b7, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000005", @ANYRES16=r7, @ANYBLOB="000426bd7000fddbdf00040000000100008200000000000000004f6b091f65014d4cd8b600000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

11:57:38 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4800)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4)
r2 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  374.799303] kauditd_printk_skb: 12 callbacks suppressed
[  374.799312] audit: type=1800 audit(1590667058.694:460): pid=17705 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16507 res=0
11:57:38 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

11:57:38 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x101002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246)
r3 = memfd_create(&(0x7f0000000280)='\x80', 0x0)
pwritev(r3, &(0x7f0000f50f90), 0x0, 0x81003)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
sendfile(r0, r3, 0x0, 0x102002700)

[  374.867363] audit: type=1804 audit(1590667058.764:461): pid=17670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/233/bus" dev="sda1" ino=16494 res=1
11:57:38 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ftruncate(r0, 0x3dba)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  374.932035] audit: type=1804 audit(1590667058.824:462): pid=17686 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/233/bus" dev="sda1" ino=16494 res=1
11:57:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x7, 0x0, 0x6a, 0x2, 0xfa, 0x80, 0x80, 0xfe, 0x4, 0x8, 0x9, 0x6, 0x8000}, {0x100, 0x7c, 0x2, 0x0, 0xe9, 0x8, 0x53, 0x8, 0x3, 0x7, 0x39, 0x20, 0x8001}, {0x5, 0x5, 0x2, 0x80, 0x1, 0x0, 0x1, 0xc, 0x0, 0x1, 0x20, 0x0, 0x1ecc80000000}], 0x1})
fcntl$setsig(r0, 0xa, 0x38)
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="310000000000000000000a0000003c0003000800400000000000140002006c6f0000000000009d31f0aa0000000014000300ff0300000000000000400300000000010800010001"], 0x50}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="13602cbd7000fddbdf250700000008000600ffffff7f08000600465c0000400002800800060001800000080007000200000008000600000800000800080001000100080009000100100014000100fc0200000000000000000000000000014000038008000100da4c1a081400020976657468305f766c616e0000000000000800030000000000050008000700000005000800f70000000800010002000000"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x10)

11:57:38 executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018000600000082"], 0xd4}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = dup(0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000)=[{r4}], 0x1, 0x0)
r5 = dup3(r1, r4, 0x80000)
sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r6)
futex(&(0x7f0000000000)=0x2, 0x18a, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  375.038767] audit: type=1800 audit(1590667058.854:463): pid=17719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16504 res=0
11:57:39 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x2)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x4, 0x7, <r5=>r4, 0x0, &(0x7f0000000040)={0x980911, 0x0, [], @p_u8=&(0x7f0000000000)=0x9}})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xda}]}, 0x24}}, 0x24008850)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20040000)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000180))

[  375.152486] vivid-009: disconnect
11:57:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x800})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00'})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0)
socket$inet(0x11, 0x5, 0x10000)
sendmsg(0xffffffffffffffff, 0x0, 0x60400d0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000811, 0x0, 0xffffffffffffff4c)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000040)={0x4, 0x3, 0x3, @multicast, 'veth1_to_bridge\x00'})
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f", 0xe00)
sendfile(r3, r4, 0x0, 0x12000)

[  375.250945] device geneve2 entered promiscuous mode
11:57:39 executing program 5:
r0 = socket$inet6(0xa, 0x4, 0x7f)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r0, &(0x7f00000001c0)='s', 0xffcf)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
write$fb(r1, &(0x7f0000000240)="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", 0x1000)

[  375.349927] vivid-009: reconnect
[  375.358290] vivid-009: disconnect
[  375.376598] device geneve2 entered promiscuous mode
[  375.393266] audit: type=1800 audit(1590667059.284:464): pid=17762 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16479 res=0
[  375.410665] vivid-009: reconnect
11:57:39 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xfbfffffffffff7ff, 0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  375.507351] audit: type=1800 audit(1590667059.314:465): pid=17758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16511 res=0
[  375.537115] audit: type=1804 audit(1590667059.334:466): pid=17758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/235/file0" dev="sda1" ino=16511 res=1
11:57:39 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040))
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000, 0xa131}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c)
sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$tipc(0x0)
r1 = socket(0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{}, "c7748b30b95c7aca", "91864168b2288d29388cb7e6a7ab32cc", "c9b979af", "bdc4f3a5e8862ed0"}, 0x28)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2c000004)
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x80000000)
sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

11:57:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}, {0x0}, {0x0}], 0x3, 0x8)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
fcntl$setlease(r0, 0x400, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
socket(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x42501, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fddbdf25030000000c00030040000000000000000c00080040000000000000000c00020001000000010000000c0005000d00658f87f748000000000c0002000600000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)

11:57:39 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x14)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0x2f3, 0x8000, 0xffffffff, 0xd0c, 0x2, 0x2000000, 0x86ca, <r3=>r2}, &(0x7f0000000400)=0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={r3, 0x7, 0x30, 0x100000000, 0x2}, &(0x7f0000000480)=0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x80}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000340)=""/69)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:40 executing program 1:
r0 = dup(0xffffffffffffffff)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000180))
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xe57, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="bdb2354f2a1ec1c5c4ff010ae2dd9d1c7c3739ea508cd071c63ea9a0becc7f53fce9cf07bd9439e69af8ddac8cd13b1368640d3730351d35e9d506d49494acf32c3711dbc7254305a172a172013223ded681e5f52698d8236661b667a82870b1838a22f5866aeea6730345850cbc9be0783cbb3b8a9c46a6d73fe198cff4b5d3037da9c16be4ab72f4ede8c0cc85057e461f5355c93979f7bfbfcd3a0f1132fa878bb91ba692a83cd6559012bb2be5a076a41ee18c4f4cad12cd", 0xba, 0x3}], 0x4001, 0x0)

[  376.125686] audit: type=1800 audit(1590667060.014:467): pid=17762 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16479 res=0
11:57:40 executing program 5:
open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x1})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x100000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xbc}, 0x8)
perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x20420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)

11:57:40 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
time(&(0x7f0000000000))
sendmmsg$sock(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@txtime={{0x18, 0x1, 0x25}}], 0x18}}], 0x2, 0x0)

11:57:40 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r2, 0x6)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80800, 0x0)
dup2(r5, r2)

11:57:40 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000, 0xa131}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c)
sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
socket(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$tipc(0x0)
r1 = socket(0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{}, "c7748b30b95c7aca", "91864168b2288d29388cb7e6a7ab32cc", "c9b979af", "bdc4f3a5e8862ed0"}, 0x28)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2c000004)
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x80000000)
sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

11:57:40 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x4, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0xee00)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r5)
fchownat(r1, &(0x7f00000000c0)='./file0\x00', r3, r5, 0x1000)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  376.826447] audit: type=1800 audit(1590667060.724:468): pid=17861 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16494 res=0
11:57:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e000000f80000000000000000", @ANYRES64=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="2c001200080001007369740020000600080008003300000014000200c612"], 0x54}}, 0x0)

11:57:41 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x5, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffc, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x7fff, 0x2, 0x5}, 0x40)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x18001, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/200)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  377.701697] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:41 executing program 4:
open(0x0, 0x0, 0x0)
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x2, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400})
socket(0x0, 0x0, 0x8000)

11:57:41 executing program 5:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
r1 = fanotify_init(0x0, 0x0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x2, r2})
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400700, 0x0)
fanotify_mark(r1, 0x1, 0x20, r3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x122)
write$P9_RREADLINK(r4, &(0x7f00000001c0)=ANY=[], 0x44)
sendfile(r4, r4, &(0x7f00000001c0), 0x10a)

11:57:41 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:41 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x7, 0x3d, 0x4, 0x0, 0x0, r1, 0x1fd, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000c}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="000000000008000300000000", @ANYRES32=r3, @ANYBLOB="08000100000000000c00990004000000ffffffff0800010004000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040))
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:42 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="c8010000100013070000000000000000fe880007000008000000000001ac0900000133b20ab401df78200000000000000000000000000000000000000090ce85368a671b04f063c600397206eb4b49eca7ba67332316f0aac8bb5e8b6e9ed807cf70e75f78ea48d3224991e9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0)
r1 = semget$private(0x0, 0x1, 0x0)
semctl$SETALL(r1, 0x0, 0x11, 0x0)
semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000280)=""/4096)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f00000001c0)=""/178)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)

[  378.097088] audit: type=1800 audit(1590667061.994:469): pid=17904 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16473 res=0
11:57:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xfffffff, 0x5, 0x6, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a78, 0x7, [], @ptr=0x9}})
bind$x25(r5, &(0x7f0000000240)={0x9, @null='               \x00'}, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000002c0)="ba4300ecf32ef0f750b50f012a163066b969025eea0f3266b99f0000400f3266654757b8ec111000b1b101c10f23c80f21f866350800a0000f23f8b82b000f20d86635080000000f22d80f01bd0050", 0x4f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x88c})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  378.202754] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.5'.
11:57:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8005}, {{&(0x7f0000005f40)=@generic, 0x80, &(0x7f0000006000)}}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="263115307768c9f164bc661e48079a10c3529d8461d4148a2f6006988b92381ced092a8e2cf056513b9d75bdbef88b8969a326fc9dd316be465bbd12a0aaa466f1ca1f42d659f56f203f0e74d0c1ad099ac467a43074550004ee10da9153ca31729393b89f32e400ad5fd4584e9252ee72322b4b036b7d87bba93adbe8ac14ae02c06e5ada31d42005ffd4d3f6a58dd4419ac7687b71edb74feed3d4bc09d6cd59eb445200"/180, 0x3528a9c0}], 0x27, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x9, &(0x7f0000000140)=[{0x8000, 0x3f, 0x3f, 0x8}, {0x30a2, 0x6, 0x3, 0x1}, {0x3, 0x5, 0x7, 0x12b}, {0x72d, 0x5, 0x3, 0x6}, {0x7b, 0x20, 0x7}, {0x6, 0x48, 0x3, 0x8001}, {0x101, 0x2, 0x6}, {0x8, 0x1, 0x68, 0x4}, {0x401, 0xe8, 0x9, 0x7}]})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'gretap0\x00'})
r5 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="1350cd9bb67d555d07ef15a9780202000000010000000500000000000000000000000efbd31ebe94561aff3c88ab66b2fab2e00e038d93bc283c37202c976a24b21e1b74cf0004000003afa01fb0f353308cd262982e0d75edec3011a53e2887867e3ed35d227ee57c346bb6baf25b8e3d22355d287467c31a797f98932041020000000edc328c109f2ac9b6d5ecc2", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0)
ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000540)={0x356, 0x600, 0xa80, 0x240, 0x5, 0x0, 0x1, 0x0, {0x2, 0x4}, {0xe380}, {0x2, 0x5}, {0x6, 0x3, 0x1}, 0x1, 0x10, 0xc4c2, 0xc8e, 0x1, 0x9, 0x6, 0x6, 0x800, 0x13, 0x200, 0x0, 0x3, 0x1, 0x0, 0xc})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d0fab22f3c0b95989cd43df54c9b67c030db178f48aca40cc9588369c0c817c680ae4331b7dc2917ad3483938f56740fe2fc812c9874a47313259a9418b52f3d76e322917b1df91725581910437bd507ce6315a00f7ebe7f4fbb16941c734533c81b7a8df70d7a9c762852f0377407ae2fbcbecd56a8b0262494f1f3bbf1e8b59f38363be4e6f10614785d54783eac0895555d7670ea44ea1f821891ff3286c2b35383cc707a7", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000000c0)="18207156d52156ebaba9259e4274512d7fd8ec63181276554c3ad9c0982a9da39ca09f4113daada5137494a419e8e091002116aba251ea5b5d185de985bdf74351e716cf2fa3f3fc663c", 0x4a})

[  378.248782] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.5'.
11:57:42 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000280))
r2 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(r0, 0x8, r2)

11:57:43 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='illinois\x00', 0x9)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a)
recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x0, 0x7, 0x1})
r4 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

11:57:43 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
r0 = dup(0xffffffffffffffff)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
pipe(0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=0xffffffbd, 0x80000)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl(0xffffffffffffffff, 0x7, &(0x7f0000003580))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={<r3=>0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0xee00)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0xee00)
setreuid(r4, r6)
gettid()
syz_open_procfs(r3, 0x0)

[  380.078692] kauditd_printk_skb: 2 callbacks suppressed
[  380.078701] audit: type=1800 audit(1590667063.974:472): pid=17957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16472 res=0
11:57:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
socket(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
renameat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00')

11:57:44 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
shmctl$IPC_RMID(0x0, 0x0)
shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

11:57:44 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc92, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:44 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
poll(&(0x7f0000000000)=[{}], 0x1, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0xc}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}]}, 0x68}, 0x1, 0x0, 0x0, 0x48cd}, 0x1)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x7, 0x4946, 0x9, 0x5, 0x7})
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000180)={0x4, @pix={0x200000, 0xf0c, 0x42474752, 0x7, 0x5, 0x9, 0x3, 0xffff, 0x0, 0x0, 0x2}})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  380.606568] overlayfs: filesystem on './file0' not supported as upperdir
11:57:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000300)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000480)=""/210)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf2#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yi\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x99\x9e\xba\x10\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\x9f\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x0)
io_submit(0x0, 0x0, &(0x7f0000000540))
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0)
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0)

11:57:45 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xefc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "738607e9f069f55c", "2d374d42e58d81a34dc2fd8828ad5faf04875e2b511c937ce3d7e0b303cc0b4a", "3b3c86e0", "1ead0b54ee724673"}, 0x38)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc)

11:57:45 executing program 4:
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0xee00)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0xee00)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x2080000, &(0x7f00000007c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other='allow_other'}, {@max_read={'max_read'}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fowner_lt={'fowner<', r4}}, {@fowner_eq={'fowner'}}]}})
fchdir(r0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)="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", 0x1bf)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendfile(r8, r6, 0x0, 0x7fffffa9)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r9, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040800)

11:57:45 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101001, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8864, 0x5, 0x0, [0x3], "67cb0021e5"}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "77badc74"}}}}}, 0x6d)

11:57:45 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x1, 0x8, 0xfab7, 0x5, 0x75a8, 0x1f, 0x10, <r5=>0x0}, &(0x7f00000000c0)=0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r5, 0x2, 0x30}, 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000000), 0x10)
dup3(r6, r7, 0x0)

11:57:45 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='.file0\x00'], &(0x7f0000000180)='./file0\x00', 0x0, 0x2099050, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xa8462, &(0x7f00000003c0)=ANY=[@ANYBLOB='test_dummy_encryption'])

[  381.492271] audit: type=1800 audit(1590667065.384:473): pid=18035 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15969 res=0
11:57:45 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:45 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(0xfffffffffffffffd, 0x80, 0x2)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x2b8, 0x1a8, 0x1a8, 0x2b8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macsec0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x400)

[  381.802010] ip_tables: iptables: counters copy to user failed while replacing table
11:57:46 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/16)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/160)

[  382.268916] audit: type=1800 audit(1590667066.164:474): pid=18043 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15969 res=0
11:57:46 executing program 5:
setxattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17)
unshare(0x40040400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x77)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

[  382.559016] IPVS: ftp: loaded support on port[0] = 21
[  382.570462] ip_tables: iptables: counters copy to user failed while replacing table
11:57:46 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8d00, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000340)="baa10066b9800000c00f326635008000000f30f36cba2100ec66b9800000c00f326635001000000f30bad104ec67d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x45}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:46 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000180))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8}, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r5, 0x13204af99a962dee, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x8010)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000480)=0x10)
r6 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000300)={r6, 0x51, 0x1000}, &(0x7f0000000500)={'enc=', 'oaep', ' hash=', {'nhpoly1305\x00'}}, &(0x7f0000000640)="3105a095901d8877cd884df748845df1ac70ff87a38772266e29d349848409a1ea7d773571ebc4feb7d18618afd75bdb70aacf828672fa1b28417b23c14e8b9a68a9d3ef9288a0013ebd5e1d5df15ac506", &(0x7f00000006c0)=""/4096)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x4f5, @rand_addr=' \x01\x00', 0x1}}}, 0x90)

11:57:46 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2000805, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYBLOB="0213e56a18009afe31a22bdfce8fabd7559d45f53d3fcd14d4b5e7389451071109579f4bba82cf9a9b6c1f5af5f17de9ca9db6d1b5b52a80f890807a55a807d04ed3c6016ba1f7f6a7d2de9f03b931453229ba35aa8ca17e5a65a84be90bc15942b90cf9881a5cc060edfb53ffdc8c210f9a165cdfac5ee15223f892d7c967b8cbfeab6df26fbbad9eec87706051dc2d0fe8c8d5415950f6510941bc40942ba2eec60ac4416ee6306e62547f2dad5165a7b486a2db3270e2300c51588620a631ce95", @ANYBLOB="ecc427e0de00000005"], 0x24}, 0x1, 0x0, 0x0, 0x4044801}, 0x4000800)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
r4 = dup(r0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:46 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(0xfffffffffffffffd, 0x80, 0x2)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x2b8, 0x1a8, 0x1a8, 0x2b8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macsec0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x400)

[  382.827054] audit: type=1800 audit(1590667066.724:475): pid=18105 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15780 res=0
[  382.849911] ucma_write: process 942 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed.
[  382.922601] ip_tables: iptables: counters copy to user failed while replacing table
[  382.936432] input: syz1 as /devices/virtual/input/input6
[  383.263515] IPVS: ftp: loaded support on port[0] = 21
11:57:47 executing program 5:
r0 = socket(0x10, 0x4, 0xa07)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000000)="14000710d953ba7443bb91261b41b2cd1e4623d46a97522e15eab00ed30a777aae9862cf98c165542b6d5b02aa39b58ec2cf7e1a7f7715981a94036ee2bd90509735dd0f940cd7ef7c77e9dd5dc2f71209d74b659da4e7ea32a16ea0283eec37e0d8b5c67faa2ae472e580a25151b02e971a570c0d0b524b4c060171f9a149f44654c97e08c89ec892a52df041c5db9f7d32d038c2bebe", 0xe)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', ']trusted&\x00'}, &(0x7f0000000200)=""/132, 0x84)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0x1, 0x80000001})

11:57:47 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
write(r0, &(0x7f0000000480)="e4670e73a20fad367425c0e7ad6b40f687264b6541cf4e", 0x17)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r2}, 0x10)
r3 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'sit0\x00', 'hsr0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400240, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000440)=0x2)

[  383.606702] audit: type=1800 audit(1590667067.504:476): pid=18161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15780 res=0
11:57:47 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xffffffd9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:47 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x68, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r2 = socket(0x23, 0x2, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4}, 0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r4, 0xef3}, &(0x7f0000000040)=0x8)

11:57:47 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(0xfffffffffffffffd, 0x80, 0x2)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x2b8, 0x1a8, 0x1a8, 0x2b8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0x1c0, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'macsec0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x400)

[  383.789365] ip_tables: iptables: counters copy to user failed while replacing table
[  383.972075] ip_tables: iptables: counters copy to user failed while replacing table
11:57:48 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x14)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={<r1=>0x0, 0x7}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x6, 0x3, @loopback, 0x200}}, 0x2, 0x6, 0x3, 0x40020, 0x1}, &(0x7f0000000340)=0x98)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='syzkaller1\x00'})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x1)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext, 0x1a269, 0x0, 0x20000, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x19, 0x40001ff, 0x4, 0x1ff, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)={0x3})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:48 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000140)={0x20, 0x2, 0x1ff, 0x0, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x2101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="c4a27d1a5200440f06660f6e03b97d020000b800000000ba008000000f300f20d835200000000f22d866f3366426440f00deb9ab0b00000f32c4213d73f6c366430f3828993cf3044966440fc77300", 0x4f}], 0x1, 0x44, &(0x7f0000000340)=[@dstype3={0x7, 0x9}, @cstype3={0x5, 0x9}], 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffdb9, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000300))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
pipe(&(0x7f0000000100))
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0xd1000)
r4 = creat(0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0xfffd, 0xb, 0x0, 0x6}, &(0x7f0000000040)=0x10)

[  384.208271] audit: type=1800 audit(1590667068.104:477): pid=18188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16242 res=0
11:57:48 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000140)={0x20, 0x2, 0x1ff, 0x0, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x2101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="c4a27d1a5200440f06660f6e03b97d020000b800000000ba008000000f300f20d835200000000f22d866f3366426440f00deb9ab0b00000f32c4213d73f6c366430f3828993cf3044966440fc77300", 0x4f}], 0x1, 0x44, &(0x7f0000000340)=[@dstype3={0x7, 0x9}, @cstype3={0x5, 0x9}], 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffdb9, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000300))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
pipe(&(0x7f0000000100))
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0xd1000)
r4 = creat(0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0xfffd, 0xb, 0x0, 0x6}, &(0x7f0000000040)=0x10)

[  384.421070] audit: type=1400 audit(1590667068.304:478): avc:  denied  { execute } for  pid=18191 comm="syz-executor.4" path="pipe:[63528]" dev="pipefs" ino=63528 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[  384.535810] ip_tables: iptables: counters copy to user failed while replacing table
[  385.011313] audit: type=1800 audit(1590667068.904:479): pid=18219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16242 res=0
11:57:50 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="e58c9a3cb91ee2ecebc91eb0893306005266643d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000000000,allow_other,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,\x00'])
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x98}, 0x16, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}, 0xa}], 0x4000000000000d0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x13a8, 0x0, 0x0, 0x1208, 0x108, 0x108, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x12d8, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000240)=0x4)

11:57:50 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r5, 0x80006)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb, 0x0, 0x0, 0x0, 0x0, 0x6], 0x6000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:57:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = socket(0x23, 0x2, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r6}, 0x14)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r6, 0x81}, 0x8)
r7 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="46811e020000000f20d835200000000f22d8400f204165420f01c2663ef3460fc736b9f50a00000f32c421f85bdbb9600300000f32420f01c33e440f01c2", 0x3e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)

11:57:50 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x8, &(0x7f0000000200)=0x2)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1fd, 0x0, 0xffffffffffffffff, 0x80000001, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  386.590940] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:57:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB="000000d8d5461ee69cdba6f443bfb2cdd9"], 0x7, 0x3)
sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x40000)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
socket$inet6_udp(0xa, 0x2, 0x0)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3f, 0x8, 0xfb1, 0x7fffffff, 0x0, 0x1, 0x8001}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0/f.le.\x00', 0x1000)
renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00')

[  386.704805] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:57:51 executing program 0:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="7f0000002062c65ae5226f549b7b60a57c5135e2eede0955a843b62c4e2b38bd53cf3fbc2f4f1ec0252e460c15b099b9443765f036fbb8b3e1f39f0dd4bab06125df2119c6c6b53c6d0bc8d2dce16e1c37615786f1ee5383edef6cdcc6dc6c3a146042b09bc49f868900f9ee8d42dc0841b611e42c12acce974eca39396ff6823c8f8a17c92ae632020cf19f8229b061afa395e9eaa9452df038219aa75484b955775cf7c868f6baa7f380809f810a80fa8b27a8ab375e977cde971c46eb09012c66d21785cb"], &(0x7f0000000180)=0x87)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x1ff, @ipv4={[], [], @multicast2}, 0x5}}}, &(0x7f0000000280)=0x84)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:51 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x2}, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0xffff}}, 0x50)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x0, 0x7, 0x4, 0x10000, 0x3, {0x0, 0xea60}, {0x2, 0x8, 0x3, 0x0, 0x9, 0x3f, "4a104519"}, 0x14, 0x4, @userptr=0x80000000, 0x5, 0x0, r2})

11:57:51 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0xee00)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7ff, 0x8004, {<r4=>r2}, {r3}, 0x1000000000003, 0x2})
tkill(r4, 0x2d)
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x1, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0xfffffffffffffff7)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
r5 = socket$unix(0x1, 0x1, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

[  387.641650] overlayfs: filesystem on './file0' not supported as upperdir
11:57:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0x6})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000080))
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x7609, 0x6, 0x4, 0x20000000, 0xc550, {0x77359400}, {0x4, 0xc, 0x8, 0x0, 0x80, 0x3, "e8fa304f"}, 0x9, 0x1, @userptr=0x4, 0xfffffbf7, 0x0, <r2=>r1})
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0x6})
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000080))
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x5, 0x2, 0x0, 0x0, 0xc2, 0x43, "84b439ed"}, 0x5, 0x6, @userptr=0x6, 0x80000000, 0x0, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x100000001, 0x100)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0xe0fd, 0x3, 0x4, 0x80000000, 0x1, {0x77359400}, {0x3, 0xc, 0x1, 0x6f, 0x9, 0x3, "75e09ec2"}, 0x7, 0x3, @planes=&(0x7f00000000c0)={0x6, 0x1, @fd=r4, 0x1}, 0x20, 0x0, r5})
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8080, 0x65)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000100)={0x0, 0xb709, 0x800000000000})

11:57:51 executing program 4:
setxattr$security_capability(0x0, &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
semget$private(0x0, 0x0, 0x0)
getpid()
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0xc)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf250300000005000500200000000500050004000000050005007f000000440001801400020073797a5f74756e00000000000000000008000300010000000800030000000000140002006970766c", @ANYRES32=0x0, @ANYBLOB="14006c61ee30004000006a70ddb000ab5a72c58a01bac40f944a6a2262429d0816514cf1a012cb083fa270", @ANYRES32=0x0, @ANYBLOB="1400020052797a6b61fd301a0243060084992f6ace7e95aed020"], 0xf8}, 0x1, 0x0, 0x0, 0x4000045}, 0x20048004)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x1c, 0x0, 0x8, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}}, 0x24040081)
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000540))
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)='syzkaller0\x00')
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250100000000000000094100000000000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000002d117a5cd92abd6cf4de9c65bef1d64ab6de1f43906a24e548c46a87b8fc036d5dee1a31d5b24e734994354680275384b896702417ed9aa0c3fbf4559efb5c3a231ca3bc4ba8ed0435f27a342082c26d3dc36ba9db70f260d38c362b5e7e907acc1df10866460bd1c6b586692763812997730ad70202ef"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8004)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

11:57:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000))

[  388.901730] audit: type=1800 audit(1590667072.794:480): pid=18315 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15830 res=0
11:57:53 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000240)=""/231)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xc1001, 0x0)
syz_kvm_setup_cpu$x86(r7, r4, &(0x7f000001d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[  389.254141] audit: type=1800 audit(1590667073.145:481): pid=18330 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=15799 res=0
[  389.449557] audit: type=1800 audit(1590667073.345:482): pid=18342 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15830 res=0
11:57:53 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x1, 0x2, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x709}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x900, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b1fe0b5751297a035844400315"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x5)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7)
preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x6, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
renameat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00')

11:57:53 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgid(0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x4188, 0x9, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x0)
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='net/tcp\x00')
preadv(r3, &(0x7f00000017c0), 0xf2, 0x0)

11:57:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$TIOCNOTTY(r1, 0x5422)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  389.724876] audit: type=1800 audit(1590667073.615:483): pid=18373 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16163 res=0
11:57:53 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x3)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
poll(&(0x7f0000000180)=[{r0}], 0x1, 0x401)
r1 = socket$inet6(0xa, 0x5, 0x800)
setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000040)=0x3, 0x4)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000000000000000000000050006000000f1ff0a0000000000000000000000000000000000ffff000000000000000096e20529e4182428fd0000000a000000000000e72cb9ba7fa29e0d00000000000000000100000000000000000200050000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0)

[  389.862582] overlayfs: filesystem on './file0' not supported as upperdir
[  389.942181] audit: type=1800 audit(1590667073.835:484): pid=18382 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15776 res=0
11:57:53 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0)
write$input_event(r2, &(0x7f00000002c0)={{}, 0x11, 0x1, 0x1}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff, 0x2}, r4, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000340)={@local, @multicast1, @remote}, &(0x7f0000000380)=0xc)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000003c0)={0x3, 0x80000})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x98, 0xd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  389.997082] audit: type=1800 audit(1590667073.875:485): pid=18389 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15776 res=0
11:57:54 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x27111, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
umount2(&(0x7f0000000340)='./file0/file0/file0\x00', 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000600))
socketpair(0x1e, 0x80005, 0x0, 0x0)
sendto$x25(0xffffffffffffffff, &(0x7f0000000400)="d66253417c55274ff933cfb9fdb993c5182b16cb070000000000000000258d75642aff52893e669e436a7f2dac52ea61182caf040000000000000063b5368d6ed9d6b60aabbb03f9980344aedc1740c60f6462ebcd33e655fa448e8ea437295359a70e82c242e68a0e24dcd92a01b5e7ad7f85e4b9b2d2dc5ef4dcec20716ddddf5d0cf96f9b643af3f3291405c73d0d11e59976293a0000", 0x98, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x88, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

[  390.079486] audit: type=1800 audit(1590667073.925:486): pid=18323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=15799 res=0
[  390.183112] overlayfs: missing 'lowerdir'
11:57:54 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:54 executing program 5:
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r0, 0x80006)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe)
sendmsg$nl_netfilter(r0, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x33c}, 0x1, 0x0, 0x0, 0x4041005}, 0x45)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x200, 0x200, 0x200, 0x200, 0x5, 0x2c8, 0x308, 0x308, 0x2c8, 0x308, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "585df8b60a4512ad52358c4ea90d706323110d7c1049bccb554d43e93500"}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x5, &(0x7f0000000740)=[{&(0x7f0000000080)="ea241f1258d0d26e1e6d47c1a4f62009a102a25641dc9b0e340a4f164269a99acf430920e6e051c5b4d4199a89155f111115752ddae3ad55eaec24757f0db325ca33bd36f33e6cc8ac19131b1eeb02e40408e34009564f941985831cb04d7765d31b24d7f390432fd2ebf26c0f6a662071165e2d093f3ad334d64d164bec76c6d3b0b7eff36084f001c47351c59e1e126628812bb66edc520808195df8bfa3cd56b141cb72f87e0871145bc48c86bf0e503b", 0xb2}, {&(0x7f0000000140)="10c7c10faedb9091a5a515eedcf61e374153633671ceedc9ce717d977212aea02d0164418e589865d2ba33a19833797572e4c911e1853a18d6952bb397a59e8639361224788ceffd0c6c6d547925d8b0cdb807116a711e5fa941b1a6e1459a", 0x5f}, {&(0x7f00000001c0)="ee7ea692786e41fa8067245bbc0f9c06760e5063547be3458bd091ae67248c53276289255078162b096e79e224fffc084e77b4a210", 0x35, 0x8}, {&(0x7f0000000200)="706b061e53d33c923335d60bf4c22a45c6c1094dd198086363897fddbaf263cb4539cfa8ee3bb82a314a92424b1730f26041577f8b4b14d0698d2aa6e34765e5875b14d30322a81fc38a4ca389e9f5b5bb35668d6e0bcfd1b82cd3fdd17835aa40013834008c176f3f7a61735d83f31348dea0750a58e19a7eaa6a4c3f3414dc8733a0d54aa92ca5e9e6c4", 0x8b, 0x100}, {&(0x7f00000002c0)="25432c4a1faf0599690447ef538ce16581b2e8736390924346b7199171699fd3de3082282a93e4234663", 0x2a, 0x7}], 0x2021010, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
getpeername$llc(r3, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000007c0)=0x10)

[  390.394135] audit: type=1800 audit(1590667074.285:487): pid=18416 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15958 res=0
[  390.489011] audit: type=1800 audit(1590667074.385:488): pid=18419 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16053 res=0
[  390.513313] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
11:57:54 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0)

[  390.535335] audit: type=1800 audit(1590667074.405:489): pid=18377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16163 res=0
11:57:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000004f00e275000095002b0000000000a97c00ffff000000000000d0f4bffa4540c883c44429781d871a4dc1c7a67d8ea174f3833e53977461c1a01a810af3219652ce8f8ad7e563d5925521dfab1f71ac843496a2820c76fbfc1967720ca650eaf873ed7a57b7c043567b229bc38273de1d90cce1c88a0b9c26fe"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xffbfffff, @mcast2, 0xa7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r4})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1})
sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x400000, 0x0)
getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))

11:57:54 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc0002, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000040)="42faa6abef43df74768f10fe669ad53ada1bbf9d86bda5e7889de9c5f5ff76a68131cc30b199c3b0812780fa4f44ccdf98f35c600e97696276fd9eb46caedfddbbf2a0588271fb77d2491c639d5f532a02d3525b7f26fe2575ff6b24f0f7369579061d7efc007be67addd8e56b684e0aa8f05bce170b66c07806d46c9235ed644be6f94bc7bd7bcd78ade40d5696e7b0b03a5389740188", &(0x7f0000000100)=""/146}, 0x20)
r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7, 0x20800)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x990000, 0x2, 0x20, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa20934, 0x4, [], @value64=0x543}})
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000002c0)={0x3, 0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x80, 0x9})
r3 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x8, 0x501000)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x181a00, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000580)=0xe8)
statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x100, 0x80, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x8002, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose='cache=loose'}, {@cache_fscache='cache=fscache'}, {@access_uid={'access', 0x3d, r6}}, {@dfltgid={'dfltgid', 0x3d, r7}}], [{@pcr={'pcr', 0x3d, 0x39}}, {@dont_measure='dont_measure'}, {@measure='measure'}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user={'subj_user'}}]}})
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000815}, 0x800)
r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0x40405515, &(0x7f0000000980)={0x9, 0x5, 0x5, 0x5, '\x00', 0x7})
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/nvram\x00', 0xa19f937cf80de8c1, 0x0)
ioctl$TIOCSIG(r9, 0x40045436, 0x3)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x22000001)

11:57:54 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000000)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)

11:57:54 executing program 3:
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x0, 0x3e, 0x2})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x20000008}, 0x1c)
listen(r3, 0x0)
r4 = perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000000c0)={0xffff, 0x0, 0x66, 0x6, &(0x7f0000000080)=[{0x3013, 0xff, 0x1, 0x7f}, {0x9, 0x486, 0xca, 0xc2e3}, {0x9cf, 0x2, 0x6, 0x6}, {0x0, 0x8, 0xfeff, 0xad4f}, {0x3ff, 0x9, 0x4, 0x9}, {0x2, 0x6, 0xce6c, 0xfffd}]})
fcntl$setstatus(r4, 0x4, 0x42000)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)

[  391.002255] overlayfs: missing 'lowerdir'
11:57:55 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:55 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r2 = socket$inet(0x2, 0x3, 0x1e86)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000), 0x200000000000010b, 0x0)
r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000005a0001002dbd700000dbdf250008fe9816b6b8000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e65766500001000028006000500000000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="d72370d7acb52eab4e1f8fd25cc0c7ee1a11e76e60a5858a5d9c76836c3b86f781b859b1bd91ea22b9c1f10d5626c857e47aab76dda7e65c47032f4f46563eb7b331f99aff2d5805d519aadad2422d90d035e5366b9ae745d5227cc7"], 0x50}}, 0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf2502000000050003000100000005000200020000000400050008000b00", @ANYRES32=r6, @ANYBLOB="fcbd2c9e42d1df95c352ab69d72f83e248c6ac532dcc9353effe474cdc9ab4213aefe5aac99bb5b1555cef915e0542c39ace4ccbf44285a2f2c6cbce392627fd2b2960440fcb5e3077835c98561aef1002ad5bd9fa302657434d"], 0x30}}, 0x4000015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

11:57:55 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x40)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "fc2c9688c1cd38"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x60000004)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x90)
r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xffffffffc95998ee, 0x40040)
recvfrom$unix(r2, &(0x7f0000000300)=""/212, 0xd4, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000400))
r3 = syz_open_dev$usbfs(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400900)
ioctl$USBDEVFS_GET_SPEED(r3, 0x551f)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x20000, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffe1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x46000}, 0x20008091)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x1000}, &(0x7f0000000640)=0x8)
r5 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0xffffffffffffffc0, 0x80000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x84)
accept4$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000840)=0x1c, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000880), 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@delqdisc={0x38, 0x25, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x850f5c5601eb0b75}, {0x10, 0xe}, {0x3, 0x17}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000a00)={0x0, 0x2b04}, 0x8)

[  391.329212] vivid-009: disconnect
11:57:55 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x9, 0x6, 0x209e20, 0x7, 0x221}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b700000001ed01edbfa3000000d70b000703000028feffff720af0fff8fffffe71a4f0ff0000000077000000010000005d400300000000005504000001ed000027000000000002001d44030000000000630a00fe000000002f00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a69b002e7f3be361917adee9ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779923e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e807d63cafa2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123ded79f903a8a3658d42ecbf28bf6c76c15b463bebc72f526d8e8afcb913466aaa7f1af9dbae2460d0b11008e59a59fab9100eb53987ad1776e72ba7a54f0cdc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf07b0a6041bdef928d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756dfc1538ff7f0000279132d5ef0600116cbefaca1f000000000000009d8f5a5557785d985a163458731f298d5140c9fe90dc66b257b0c0295afab36f353e1bc1574a6305790a25cdf085aa4192696ebbf416c0820e106e29d9654fce8ff4de960b344788b0ae6e1d41728a7b2014beddf3fbfa6082fbb36c8e235b4a2ea6c63adc3bf02d67b11f8fb0f64009fc03e060847a6c76f8601899040a539e6bd1035869070a4779af73a30046ae94937c0d6dc233866d49200e2b6aed2c09a000454573d185cbe6f6458f8861b92dc7caffa7c1b7520f5a60d7e7478b06825a91d7055e8032d060c61454e899b6e29b9f726de7653d5307c2102a38d48ebdc8c853400900b346e43e3637fde6e137d35267c37200001fe41c645f3b6fa9baebb3e42f648af9abba14b578f43b1aad90fe931cc77bc169a74da221ce280c149c1bc49fc422830747f99be5fd4e51f0c340d6fc8e6c73680300000041c565969111210f75c4776d319be8a5d3378d493868614b79b2f24d3dd34dda6a931135244250610b3798cd644285d915e5f44391fea1bbf70b0500000000000000669c381c695907199a46a5997f7ceaaada5c2d90de14beed0000000000000000000000000000000000000000000000000000004befd57363532929fd9609d5ad41cb5081b7fe54ce8b00636fd98ba9ece55af728cb40041497290d440e4a14cba92a97b5423da3ada4cc7ea06a586778e53337d65f595de289d8b3125ffaf177a6cfad82f3b5c70f1a62aee6173fd4e9068815e8fbb8479a154d7805f2df2fae02835c73b8615888cc3f6ed2b08211f594816fb17c637b664bfc4a7050e7e6ba9c2d194ebe1828f73b7d9b"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
r4 = getpid()
tkill(r4, 0x9)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000000), &(0x7f0000000140)=""/130}, 0x18)

[  391.372426] vivid-009: reconnect
11:57:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x26)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
r8 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}]}]}, 0x88}}, 0x800)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00))
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600))
open_by_handle_at(0xffffffffffffffff, &(0x7f00000019c0)=ANY=[@ANYRES16=r3], 0x12da00)
sendfile(r5, r9, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)

11:57:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x7, 0xb, 0x4, 0x20, 0x2, {0x77359400}, {0x3, 0x2, 0x8, 0xc1, 0x9, 0x20, "1e3177f5"}, 0x7, 0x2, @offset=0x4, 0x9, 0x0, <r1=>r0})
r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
keyctl$revoke(0x3, r2)
connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

11:57:55 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = socket(0x10, 0x4, 0x401)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000001580), 0x4)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:55 executing program 3:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x200, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
fremovexattr(r1, &(0x7f0000000140)=@random={'trusted.', '/proc/self/net/pfkey\x00'})
ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000100)={0x3})
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x80, 0x9})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0xb06a, 0x4)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfc, 0x405080)

11:57:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
r2 = socket$inet6(0xa, 0x800, 0x2)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendfile(r4, r3, 0x0, 0x7e9)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x3, @empty, 0x3}}, 0x5, 0x53, 0x40, 0x5, 0x5}, &(0x7f0000000040)=0x98)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x4081003)
r5 = syz_open_procfs(0x0, 0x0)
prctl$PR_SVE_SET_VL(0x32, 0x850b)
getdents64(r5, &(0x7f00000000c0)=""/158, 0x9e)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
fallocate(r0, 0x11, 0x0, 0x100007e00)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240), 0x0)

11:57:55 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="5a2239de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad774957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0a5463a4034ecc261", 0xb3}], 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x286383, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
close(0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r5}, 0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x8, 0x68, 0x8, r5}, 0x10)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
read$char_usb(r3, 0x0, 0x0)

11:57:55 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000440))
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000000005000000000000000000000000000000000000000000000000000000000000000000000000ac9afb6210e92edef6c5d900001071fcd01fae"])
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000844)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x1}, 0x10}, 0x78)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
close(0xffffffffffffffff)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)=@netrom)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)

11:57:55 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2)
modify_ldt$write(0x1, &(0x7f0000000000)={0x80000001, 0x20000000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
ioctl$TIOCSBRK(r3, 0x5427)

11:57:56 executing program 4:
mremap(&(0x7f00009e4000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffc2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x100, 0x0)

11:57:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x2, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x811, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000400), 0x6}, 0x2f80, 0x7}, r0, 0x3, 0xffffffffffffffff, 0x9)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{@none}]})
socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x4})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = creat(&(0x7f0000000440)='./file0\x00', 0x40)
fcntl$setstatus(r3, 0x4, 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)

11:57:56 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xaca}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x9}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100), &(0x7f0000000240)=0x8)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003480)=ANY=[@ANYBLOB="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"], 0x1004)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10)
ptrace$cont(0x7, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b)

11:57:56 executing program 1:
accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c696e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa98554e9240b90000000000", @ANYRES32, @ANYBLOB="534fce983e5c2d7673b4958005e750e907d4fdc7bf13d088ad203bd736a916945b0f66f933a31733392547e20febfc8d209cbf74cde243bf2406fae4ddbe02d390fffad64b012deb14b92f020709e51b3e84a45b53c64c5aa753b353"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, 0x0, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x14}, 0x4)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000237eb3ccf807609ebaa57b5cb430500c11c329d7e26f0d330213d72", @ANYRES16=r3, @ANYBLOB], 0x3c}}, 0x4)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000380)=0x525)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x94, r3, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1)

11:57:56 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x126, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
socket(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)

11:57:57 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x101002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246)
r3 = memfd_create(&(0x7f0000000280)='\x80', 0x0)
pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0xfe96}], 0x1, 0x81003)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
sendfile(r0, r3, 0x0, 0x102002700)
r4 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace$getsig(0x4202, r4, 0x1, &(0x7f0000000080))

11:57:57 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r3, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x12c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffeff}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8081}, 0x20048084)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:57 executing program 4:
connect$inet6(0xffffffffffffffff, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000003c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x4000001)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0))
setresuid(0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8dc312b98ea71718, 0x0)

11:57:57 executing program 1:
accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c696e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa98554e9240b90000000000", @ANYRES32, @ANYBLOB="534fce983e5c2d7673b4958005e750e907d4fdc7bf13d088ad203bd736a916945b0f66f933a31733392547e20febfc8d209cbf74cde243bf2406fae4ddbe02d390fffad64b012deb14b92f020709e51b3e84a45b53c64c5aa753b353"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r2, 0x0, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x14}, 0x4)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000237eb3ccf807609ebaa57b5cb430500c11c329d7e26f0d330213d72", @ANYRES16=r3, @ANYBLOB], 0x3c}}, 0x4)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000380)=0x525)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x94, r3, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1)

11:57:57 executing program 5:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
pipe2(&(0x7f0000000100), 0x800)
mount(&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000840)={0x2c, r3, 0x12fc8ad0283830c7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0xf618000000000000}, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x2ac, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x30}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x771}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f7c671f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf080}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbe}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x214066, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
ioctl$FIOCLEX(r4, 0x5451)

11:57:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x7, 0x4, 0x1, 'queue1\x00', 0x400})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x4008880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
faccessat(r5, &(0x7f00000000c0)='./file0\x00', 0x82, 0x200)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8], 0x20}}, 0x0)

11:57:57 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x282, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfbfffffffffffffb, 0xffffffffffffffff, 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff020000000000c5172c0000"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = getpgid(0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x8200, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8000}, r3, 0x5, 0xffffffffffffffff, 0x0)
move_pages(r3, 0x5, &(0x7f0000000180)=[&(0x7f0000823000/0x2000)=nil, &(0x7f0000838000/0x4000)=nil, &(0x7f0000009000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000002c0)=[0x271, 0x7, 0x800, 0x9], &(0x7f0000000340)=[0x0, 0x0], 0x4)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4}}, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
fremovexattr(r4, &(0x7f0000000380)=@random={'security.', '-\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:57:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0aba733a4705ac498483aaaabb86dd6099bc44001000000000000000000086b900000000000000002ffe800000ffff000000000000000000aa000000000000000005fe9b7990f515e841ef4acdcc15f7b850902415f47074ea91f54207"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:57:57 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
dup3(r5, r3, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000580)={[], 0x0, 0x2592c7})
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x90000, 0x80)
ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000080)=0x1)
r9 = fcntl$dupfd(r6, 0x0, r3)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @ioapic={0x5000}})

[  393.449776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:57:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0xffffffff, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4347}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000580)=""/179, 0xb3}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0, &(0x7f0000009ec0))
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x8)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0x8, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x1000}}, 0x1006)
syz_open_procfs(0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0xa)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
r8 = open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000001})
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r9, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

[  393.600159] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xff
[  393.626116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  393.637739] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x98
[  393.653466] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x33
[  393.673813] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xcc
[  393.697043] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x67
[  393.706181] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x66
[  393.714996] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x1
[  393.724193] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[  393.732791] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x1
[  393.746826] kvm [18641]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x0
[  393.757274] *** Guest State ***
[  393.760588] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
11:57:57 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x3}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2}, 0x3}, {{&(0x7f0000001340)=@tipc=@id, 0x80, &(0x7f0000001940)=[{&(0x7f00000013c0)=""/163, 0xa3}, {0x0}, {&(0x7f0000001540)=""/83, 0x53}, {&(0x7f00000015c0)=""/161, 0xa1}, {&(0x7f0000001680)=""/36, 0x24}, {&(0x7f00000016c0)=""/253, 0xfd}, {&(0x7f00000017c0)=""/238, 0xee}, {&(0x7f00000018c0)=""/100, 0x64}], 0x8, &(0x7f00000019c0)=""/191, 0xbf}, 0x739b}, {{0x0, 0x0, &(0x7f0000001b80)=[{0x0}], 0x1, &(0x7f0000001bc0)=""/116, 0x74}, 0x1}], 0x3, 0x0, 0x0)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x800000000000, 0x1, 0x8}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4080)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000001480), 0xc}, 0x48063, 0x0, 0x0, 0xb00a7703cefd7fcc, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
sched_yield()
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x28600, 0x0)
socketpair(0x15, 0x5, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x17f)

[  393.798186] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  393.966225] CR3 = 0x00000000fffbc000
[  394.026411] RSP = 0x0000000000000000  RIP = 0x0000000000000000
[  394.057049] RFLAGS=0x002592c7         DR7 = 0x0000000000000400
[  394.078646] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  394.093826] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[  394.103628] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.116216] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.126622] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.134953] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.143709] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[  394.153528] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  394.163014] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[  394.173508] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  394.184180] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  394.193740] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  394.207793] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
11:57:58 executing program 4:
r0 = socket$inet6(0xa, 0xa, 0x9)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
listen(r0, 0x8)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[  394.223795] Interruptibility = 00000000  ActivityState = 00000000
[  394.238656] *** Host State ***
[  394.251925] RIP = 0xffffffff811642af  RSP = 0xffff888051bef9d0
[  394.292290] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  394.326391] FSBase=00007f80898b6700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000
[  394.353281] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000
[  394.364024] CR0=0000000080050033 CR3=00000000a7ec3000 CR4=00000000001426e0
[  394.386121] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0
[  394.389230] kauditd_printk_skb: 18 callbacks suppressed
[  394.389238] audit: type=1800 audit(1590667078.285:508): pid=18668 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15938 res=0
[  394.410776] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  394.469721] *** Control State ***
11:57:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {0x0}, {0x0}, {&(0x7f0000000940)=""/71, 0x47}], 0x5, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x7ff, 0x4)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
socket(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380)=0x3, 0x4)
renameat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00')

11:57:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)="882645c6e2d278dbccfc4f1bbf31ac0dc25ac4e85f2270a4e72a5c1847fd0d15098ddfcb7ee0e60349c79fcec54445b05e404707fec67472181986e3bd1328f4d8b19dc503de3b37eff48f57771042ca9bd35d667f86cf9cfbfc1b12a0850dd533bf9555e6cb7604a28378f0612f910de0749a24d1d3cbce8953722a7bf1ee09f0d5bbea984e151c1aa0ce724eae6da6c903d06c39d9da59ba8e7c50b45bba0e1e4d48cd7fa74add169f47201f20dd8fb730b809bddba34390903062ccae2cb9228b9c48fff29057c54618b86da9bbcdaad223497100de4e4bcfe3a7d4b6e253976521883abb98c3a917", {0x3f, 0xfff, 0x47425247, 0x7, 0x80000000, 0x53, 0x5, 0xe7}})

11:57:58 executing program 4:
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
fallocate(r0, 0x100000010, 0x0, 0x4)

11:57:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x62a980, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='ip_vti0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x3, 0xfb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03})
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4004834)

[  394.620387] audit: type=1804 audit(1590667078.415:509): pid=18714 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/242/bus" dev="sda1" ino=15845 res=1
[  394.622519] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3
11:57:58 executing program 0:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:58 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ee9d0000002600010400000000000025884fce00b1226f96c10592901a2003e33f7b7775a0a112b8787226af075263b89cea389bef1432684c1c3d5db8e7653d3cafe213fb336358cecd47c4bc76bf28c07c9ffb704b573e92cfccb4cf857926e786e3cf0043155db6a4c743c1f7543bff8eaaed663a9e4ed615bc3662020057b020d6b2d701d13725ed26819610a1155c7b2c0f3ae4f60215e98ec021ab4809a9151819c22b98bf8d21880620fd7a18ebca84d3643ea9e90b4286e1751b1a9a527c837fa71e3c2fbe0a6f49c812ef8d43", @ANYRES32=r7, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001"], 0x44}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r7, @ANYBLOB='#'], 0x20}}, 0x0)
pipe(&(0x7f0000000180)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000040)={0x1, 0xffffab75, 0x1})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010000100000000000000000000000000b5a3c2473580010dcfd88c41a3c10adb9c89f5e77b89381873759a0ff6cf93c6d1111f4861f41e0c54ece6b6075605c6692f740f9ac461423eb6e6633f9f18767ae3e2dc2baa87a7d18e3ed3ae866ccfbd93652931a3a2b2c11dc169922159bcf6c7baea6fef43622738bfa7b00afc13666091d1124c9138467681924a52ab7ccb3b8f10d997eff05ac47c71c7747cdf88ebbd5c3caac6209cd3ac415d99830dfdf043eb8da0a4d3c60f1b75e97eb8959fc845335f967443612e130e9d7f", @ANYRES32=r7, @ANYBLOB="9481000000000000"], 0x20}}, 0x0)

[  394.693289] EntryControls=0000d1ff ExitControls=002fefff
[  394.756151] audit: type=1804 audit(1590667078.425:510): pid=18714 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/242/bus" dev="sda1" ino=15845 res=1
[  394.775247] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  394.835661] VMEntry: intr_info=80000004 errcode=00000000 ilen=00000000
[  394.876765] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  394.877404] audit: type=1804 audit(1590667078.435:511): pid=18715 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/242/bus" dev="sda1" ino=15845 res=1
[  394.911904]         reason=80000021 qualification=0000000000000000
[  394.925078] IDTVectoring: info=00000000 errcode=00000000
[  394.931149] TSC Offset = 0xffffff2a2754a34b
[  394.989224] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.995125] overlayfs: filesystem on './file0' not supported as upperdir
[  395.002830] TPR Threshold = 0x00
[  395.050421] EPT pointer = 0x00000000a8acb01e
[  395.060844] Virtual processor ID = 0x0004
11:57:59 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x2, 0xd000})
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a1d0200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800024040ff94a60900030073797a32000000002c000000000a0300000000000000000005"], 0xd0}}, 0x0)

11:57:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x62a980, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000180)='ip_vti0\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x3, 0xfb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03})
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4004834)

11:57:59 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x7ff}, 0x1ca34, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
renameat(r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000000f000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001100))
dup2(0xffffffffffffffff, r2)
setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x400000001ffffffd)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c)
modify_ldt$read(0x0, &(0x7f0000000100), 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'vxcan1\x00', {}, 0x3})
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x812c, 0xc80)
sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x8, 0x5, 0x3, 0x7e, 0x2, 0x3f, 0x7, 0x7, 0x1ff}}, 0x43)

[  395.154559] audit: type=1804 audit(1590667078.435:512): pid=18714 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/242/bus" dev="sda1" ino=15845 res=1
11:57:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x2, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0)
sendmsg$alg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="c24bcb276bfcf734e099d0ab57d97fd0487026b536f67a9b2108de9a29089c1e4caea8f79a0157eb0efa1ed442068b99e4429b598fb2ce89d63cfcbc52c8ab01eb783e883314fd801831b6aa4eddfcbaa94ff5a263b532c0120e574f58340de3ad2bb68518798cbb9bfb04ac3a207048e5adc1cfa773fd868e78c4b6c614a58c9339de5197975569185a71f08f09569c9707dd4e093dc425f1828b87415804796cc1c80eae73e061bf10e04eaabb625e049a6a2e2d043d79ef458adddf4cdc8506a380d8f1e0eeac58345cff47d5023b", 0xd0}, {&(0x7f0000000280)="b2363b1c6df6b5aa20d1cec570b98ac4db209adbb744490bf7bc2e65be393dd009272b95a31bb8fcd7c76fab621b87a430cf5772b3c2776dc8eb5c392851d336534eb1c2d90759749da8a7f43f02f47de90ffadfdabe91adc6c58520e41b59c3b2857acdd5ccf5fd679ce2d451de29f2fa9ad7bacc4f4aaf15d5d8ac6914146d1739d0d9005f5468a69fde3573cbeb199176c11bb146e2ab", 0x98}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0xe8, 0x117, 0x2, 0xd2, "7876bba1434197cf595a474d09393e207e8242ce275381eeb82e778c905e7ba44b04aea752d9aafefecbdb4516bda9b8d527cfe65cf74060090aeef6edf2dc827fe129215ee60efb5593891a6e10aea934335ca2648e28ed9fe88b21455f8d70e4d0b243845a858d6dd504f6f0b5769a269bde5c4142231672dd0db40fc7896390b65165be00145cf7cda728d7124e56d385c1aef25e1013a4eb4273e068d85b4821b0baf5d6b6f315e46d92bf3ee80f681ee70febfc623af4cc09dc925b2c51fd8298ed8905f2c68768e059824a7518b9ea"}, @iv={0xf8, 0x117, 0x2, 0xe4, "9d9b938d1c31f04876a96fb4e03bd9133005ba9930ffc07f1eae7de4f1a05088f15d3cba257dd45be892935c11b29bec9c99dd6da5e642adbc4cf51414d04b5412ca6e0b56169916b53a2999bd0a76e324d499206ed9c6698d1824f340a7115c849abc0d561b337923a156e48bace860e8b3db5b0db728175e3ac13041b1d1955b6c9c7419494f2f139c42e21284f43ab9f7414810d81a2a9bfb2577c21fbb80497f760ff85c454ef42fe25cefaa8dcf22a4e227532bb77071258dfdfbe47f6afc7a04a282aa8674b49855f9535db28ee10a684700ea8948e2a4ed40e1d4e7f51143ada9"}, @assoc={0x18}], 0x240, 0x40050}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}}, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000)=[{r5}], 0x1, 0x0)
r6 = dup3(r2, r5, 0x80000)
sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x48004)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:59 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9deb0100180577d6d36077ac4d6285631932c010f61251e0a8db"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
shmctl$SHM_STAT(0x0, 0xd, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')

[  395.289859] vivid-001: disconnect
[  395.316288] device geneve2 entered promiscuous mode
[  395.338919] audit: type=1800 audit(1590667079.235:513): pid=18770 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15987 res=0
11:57:59 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8038)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x121280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x335, 0x7, 0x1, 'queue1\x00', 0x4})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0)

[  395.435562] vivid-001: reconnect
[  395.469236] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.470654] vivid-001: disconnect
11:57:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010068df957ed712d8e8ba2b3f36d7840400000000000000"], 0x9, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r2])
mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0)
socket(0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0)
renameat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4)

[  395.483871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  395.508585] device geneve2 entered promiscuous mode
[  395.514207] vivid-001: reconnect
11:57:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3040, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:57:59 executing program 3:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="00a4fd0000000000000028a4ff07ecffffffffff"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x60, 0x2, 0x0, 0x0, 0x0, 0x101}}}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x87c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

11:57:59 executing program 3:
prctl$PR_SET_NAME(0xf, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
execveat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x1000)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[  395.648027] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  395.661316] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
11:57:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040))

[  395.701582] overlayfs: unrecognized mount option "" or missing value
11:57:59 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  395.797969] overlayfs: unrecognized mount option "" or missing value
11:58:00 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x2, 0xd000})
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a1d0200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800024040ff94a60900030073797a32000000002c000000000a0300000000000000000005"], 0xd0}}, 0x0)

11:58:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x11})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000780)=0x5, 0x4)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:58:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x200402)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000180)={0x2, [0x10001, 0x0, 0x5], [{0x1000, 0xba, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x8000, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x800, 0x3, 0x1, 0x1, 0x1}, {0x9, 0x9f87, 0x0, 0x1}, {0xa9e5, 0x3, 0x1, 0x1}, {0xfb, 0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x20, 0x3ff, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x7247}], 0x5})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:58:00 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:58:00 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000180)=0x4, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

[  396.166881] audit: type=1800 audit(1590667080.065:514): pid=18776 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15987 res=0
11:58:00 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
read(r0, &(0x7f0000000380)=""/96, 0x60)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000002c0))
r2 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
dup3(r1, r0, 0x0)
tkill(r2, 0x15)

11:58:00 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x4000000, 0x4, {}, {0x5, 0x4, 0xf2, 0x0, 0x6, 0x8, "1f94b281"}, 0x0, 0xf1464de464d0a73f, @planes=&(0x7f0000000040)={0x0, 0x594ee818, @fd=r0, 0x9}, 0x9153e56, 0x0, <r1=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000180))
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  396.398741] audit: type=1800 audit(1590667080.295:515): pid=18861 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15845 res=0
11:58:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000080)={0x5, 0x1})
r4 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="2d22e7d18aa4"}]}, 0x20}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0f42"], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  396.461007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  396.479516] input: syz0 as /devices/virtual/input/input8
11:58:00 executing program 4:
prlimit64(0x0, 0x4, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, 0x0, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0xffff}}, 0x18)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = gettid()
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x16c)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r2 = getpgid(0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x50800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffff}, r2, 0xffffffffffffffff, r3, 0x0)
syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x3, 0x201)
ptrace$setopts(0x4206, r2, 0x0, 0x0)

[  396.496926] audit: type=1800 audit(1590667080.325:516): pid=18859 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15960 res=0
11:58:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="bebc37573417944e7c2e03cd77c119789d8a3bd37ed060d2a27a9d8658601124aef9306601e9d9e910d8702b49885eeae2e2c79adbe7b9c69d191179dc90710a5b961ab56918e740d6484bcc8e02dfd85165c2055ee6ca47380c123f6afa4b64b1be4e4530cbcdd80b7a3b36edea7dee952aad83d71412f2ce0562d75ce8e78e07b7919375b738dad3cdadfa4453796749d043dc488dcd8b990b0a2e25d5cccfea2a80991321a4c85faa66693bd9e4532012ce66cd46f6dd811dda1e3bc40b8cfebc9012ad3324ac9a6e40c874e166536b0d9789053ef029fe5312a3fd1d05478810b025a1828aa8f97e8a05cde70c0b0b6d29fafdc0906e311584acb30f7f148809fd56e0455fb63c99715ea6b5bb10df741e63e6be60dd7bfd7a2d423f1761a84d33af84ec9f51f9414dd14f7a7825222faaf0741d4726b74659d3181772373eac23473ac228859a0ab8f1b6814637dc7f88b9015058a87a0aa1ce52f174b940aeed39b842fe52813d1dff1493379e14b2d188cfb19ce141faaf361e08c41afed6aeb68694725e4a7da9444d94ddf8a0a90066024447ab1d3ac4a4d2159047391ee9d1edb2516d40fbc9276957804563ea7f1acc92854b12bb8ba24cda6f11335ea7b88491883820e637afcf7df7bcec4611b4a532123533b59fd6e6758b02265d51c4b6e9f35a079fe93d73889910e606f5499f6b0e2c69f0ad2d5330254e9fc01e1cf6078e499208a44a7f9dec43b1d19ad62b11bf0dddf8c08b02ae24b771f30bf280903e9df9b97627f30e81e085f7ce8f0e540500eeaf2af13b945ff792fb0f7330c13e5d399305d19254881ad5dee59232c1c54e7d068fddfac69105f314d6bcd1959fd5d67dd7198f6b6912447b816b091815a1cd1fc4765f25b8e6974419d272a99badb9b226f8bf7cf3a7fdc670899d3f5a0f785cf686d5bf9f388ebb5f697fea841ef3690652a6b2ede1adfc2347b8b7f9897a523a3422b5bb3203b22fafe5996b91c64df2788dc9c9053ce0e27fcc9683563e82bd9497b70cfe747eda866bde0ce503e1afe32960ddd5d26a39995284758d6512ce0e124057833a67a0096a43336ed6cf5ae906378346606e27eb63ede50f666c27e00f8a2aea0042e348094fbd597b1ec1356d680290c4097c103070ba3df10c5c7445f8550af1361d701199fcfe7f79b4f7d947a06b64bbf60d33c0306f73bd3fb9e012681023d234c5d8927702e8ef643693b6d670791177bd7b31731bd351aa1a59a7cd1160772b0558a96a0ee21af013f0d84bda1542358ef0bad052f313853e0f32b43153200daa4bc5c4f51a314ead071cf67bb8177560bad893ff28953758441b6b2d909a35db8ab60a7bc798524ec75a53d0e5d43aff61827aad8b7584118152e3c7dbea9668133ff5ced4e8c70b2974afaca774e5dccbb3892a20c78682f8b9a716f3bc3c264ba3f1b5882f3a38669385ba6db9816c9cf08f462a6272a6c37649b6a40826ab7ceb2605f69e1bf65d0747163111f6897a1c85f10f1bf4a8aaf96b29ed15cd32fa24cac2ddda49d0fcde093c10e77fbcdc20c565ef2da60828ff953f2b82d7ed15c20ac2781708bf56cc551ae1bea960d7979f55fba87b67e5b76e48648503f84db9cf6dd44a799e28da8852082f06395a5da958be0d0c2ba74fcfddd525b565502f1709e5f9e51893974c890f39b2406c111442fba90f48739821e9908fd446f55aae6a7c00aec7c4ad2dafa911053ff49f57d79a8b0eb1747f40eb15ffa7aca8fc303460b16d448e74fae08d4b7434a86d4f6e2acb6e9ccac8ad3e6706de64c750d17d93261a2c34e69b55131604f4de452c6c08c2635dee21c6896c9d696706088155941ddb006f8d7b85978787f34200426488b433b3ad6906bb950b986267870289d2bffe1e0887ce3d9326af20b66fb230d4ace95c11536243a3b1f1ea00108f9c354a16ad3fab45f6ae536d3bdafad2712e9ff7184a80b7555cc506b2b094f01b73bcdee9cfe7483352e196346907f7c07931bebf967ee4798825a018d3565c29d27205e57347ba3498cb33e926809e8ac625b2c52afca8705c44ff8bd3e413fc3260dfa2ff4a099bfb074c4f77697581bb271a076e92bf8e26d4175ee95eae3af28a9ffe8abf59562d4a8d9766794e2347e6f07d7642a64d019bf6c0f96c6269a0787976b8c1446555dc66983d5a4ffa13cb7f5e47a0142cef49f28eabe8c1f3045a112bb841f2ac5ea79ccaea80b60dcb182e5c52535556702eef9a3338ce164d4fbf5c285d15ad307ae86315f1b122505841f7d8b09ec2facf4dfbc3a8253b5f0fe44fef960ecffd251e8ddb8f56b9ffa8f1da238961eafed5feea260000c8104a96541f9197e867534e81cf36850036676588e23a1035482014905934c9d49bc302bb9e9fbaf56008e27c3899bc4c56797a2de50887e6b770b848ac304317a1cfe408928016892e06a5d62272390fa5aec7c45a6e936d20ff009a0946d64acc35c542e2f6e4c7bd2c0e71bc93b76c47feb6474e5a9d2f7be3b0ddc67e82341d2cfe8314c2ccb587b4dc63d10eaf5e13afc1ed0fd9abd4f52a225cf2ebc5cbfac192440c754fbd3df589e72e03c05b7f120c85aaf82c07ab055345c61ab416bf385dbcd14c34e2a2e562970882a6f8e2bceb8a24d59c7db40edfafb3e66f44496b8575de7405b2d9fec42b40ef142efec36cd271b6207b6c668d24965de5ead6daa861679e0ff97185c841ea6865887c43fe44be254d2cf300b5b608d1bf58bf35866e10b178a35cf740cbff0c649e80851f130e00e35ea751f3e28dc835f1966d26bad82aff363925ab93437ea172b699e72e8949d6734f35b8556b138dadcc839797aca2a1e64fb63369a20007507b8af45cc0c66f6ded5d45e1c818bc89de4ce4298f098e35fbaeccd65e6508495acff22980bc3229fa863faf48e50be1bef352c0371874a6dc41799ac6686d80f214c900d6cb03769255537246dc3db2e61e119745044f5a52389dbabe153efcfcb0b6d3ff779a367e99a55b046aec47715b32a34b693bf2591ba71c0a03e1820fc9cacd15f2a0f5fbcb8d6f1401e3198910ee241463627e22093178a44c6ab0030436fbb4bcf580276120fc79b97fb2d73b9f26a1d4d37da7db64caa8b9f30fb1002d5e1eaf737373a9f203732547c4ad65d40fa91dd0e084c5dfce72e481349988474a443a15fd0b380fd1934346b1bd4cee07c021313dc69eb6888bf113c414310c7ad2bcd7e90663468d9d6cd5a3137d4592fc7bbcd076cfda7d7a846512025979c93216f046a6b4f77807a17caa183fd885a99646612f9f5c612281f4b08f86b8ac2fcb8695a6dcdc82e19cb239b6b757abf7bb93c1a3a0c70f05fd4884b19c6560f1e233ca3d03156338404a5b29fb34cb96cc2c21ea5bfd776ab4c900f63249417df63d301c7c789a08cfcedb44a10dd74265afdeeb84b3bb73d45d632b9695991d416b0d84764ef89259632ae961c10747e99f986589f9287e20b2616fc3c6c4fc3e51888c868b18b117fe3c7b37760bd324614c7238d433f3885346871a3746c6ca983c4712e9762b57cf570f42e9afe954338783d479fa3af9ccc3f4bb90ac2c0e4e253e7b54bf594a49d2f99b9f1d2b4b5f33e1472e4699010a562833905493dfda63216ab26846b076fc80291452f4314c2a6b52473af7a9133343006e62ce7f0a9696e8f4c874af2ec034271e644ed0b1d54bda457e83e9ed2ec4ab1318726729811fe8828f28c18727d195c5f46980182e790ad974c9418aa52a1b24b487c9f527a8290b455d759688f348f3815af29d197296173e027650c0f00da2e4a246dc42343ef6f998b08743813d2ddb9d6c9bbe4621300d0dd15560da9f34c07fe21f1e310be5fe936b6723bda266122d3831aba433a3951b92990d0546048cfd731a5d18ffa8e935d6a1dd56763f4caa2848ba46788a8ec29608d25c463d9d6cded45ae8a3d0f3b3b9aca3ff94e23281ff8cf500a245fc784c5afbd226f9becd9fbed3ddd44aa26ce1c5b8bbfd433a7163bf5f280139244cc7e50f84c773588c0a2f58627a24db7d3d5bd17f32072e8300bdd0344d7080b9877343f241a1f02026b9b8399267e2ea588c01ab0a3e0f942e37a051fa66fd148dd48a804a5ff80b5ac6bfe27083e11545eca3e403a0ce4ace2a24c6058b2dc75226260eacf5224ce18743f54e19f8dbb5b0077848b999a036077fe2fb4efcf7e03538dfe79d1fbed137d8c15c84694d582c7e5b0e6bcb8cab04097a2e824fb25c6b5d5506e3e4086a694d281ccdac65e96eddaf131d46f2ad5105e1ccbb1bbd9239cd73ec105c8d1636cc3094701ce826c1f2331e4d85870b7639e4e2cb4e13651b1b66c558df71d288187c8bbaf7137689d6324931cce22eec300bb2083e2abf274dd3f34309040aa006711277657c1b1ff5526d765cacbf91b22cdc755ed44901508c10de333dd126fc4b890cc9cb035a6ddf915ecc3c805a9bff67d901e4f5aeb4353c5ed1ef6f92590b0362acae8a8a54b3959d542a588432112aaa7a8a297930a352656f4e5565c10dbbcdffddf6125a4d2c1043f2feb6d31e3acc9ce2c9e374b28c602b01cab72768658b77bd7e0706cea5dc069fd700b0e29ad04eabd8fd579a80c3f39482d3ac338574e0c548e45fa649873ed7a684dce43f5bd023b5aa5eeb52f8c08dceef8644d8c553cb45d6bb0aa1c7adc928d47ced61a17eed3d869b9268decd67a72aa844c9e05eba7a88d9bdcdd78517a27e2c4c2021d589ad848f1c37d52e40fc8c0430b49b3d15cc9d7ec4123fee314dc5e67ffba13afb85ee7c3b8f0be23b801a7a56fccf281880ed00e46f425f33c9c7269e9185851625ff2c93d94f2c6cfb54376f4a0945e2aaae69b27877d034afcebb5a4427af74949a0e1c26ed295e59b0e7ad350528b8e5faf862ab81e8700c25990e7d3b8687513a059cee1d316aacb7f066851db7f46eca8f7ef09cf55a386b0921cf62a005920888512e9de8606696e320667ce594987be25a3b4e0ec1bfa799b1beb23b32eb6ef30b9b6bd41f5fea792afd383785d3bc22a6a4ec99f6954ed18193d4bd34007eb6a3a7c0867f000195d972cbefd71abce2aafd346b786bb0a4d7c71992bb25d8dedfa1b2e0f081f0a7481acd86bff78b34a23a7dc7db92026dd1ebcf59d04e99106ad46ecc04681af67bef188960bd77229a881492eeb2bafe5c224be28e339b54c53c4fb432bbe244b2598899fc9ffc3276c5a6325a582b60e9788933040af7815df6817cdbd4b640cdd2a9a4cb9389ec7b93839ae9f00cddc42294da71b935870841debeba960871221b47068ae1be1996fbbb59b1c447b7573f8601aca223ffccddc18b64ec92760c847b112a8fe7bb1dee83c740e598a70dcae0060f0dc81f34c0aa9d632680b4547fbe8f314546bc1f1cdf5dd2d63208b4f7991a0069486eae07cfed63aebcb7370d0a923b3c074d5b7fae5f5d7fb0e430a9c077c8d47156626df0c9ee4c18e4294ba7dedb9f847e2767df8987745dd4e7a4eaf03b695676879bfa0b96cb184645963f9a9ea70aa3b1328237f5d8e508571d6e06c7e7590a8b79567c39195bffc83c81055d170c59219dc26756b1e72e64d32e1247812e18694bf4e62fe65d5c1485b59effa289bc939ce4b2c9a0bb353b6f0ca529b90fc47b8776be1b036a63da934bac5a5fb91af74ba1128882bda602a8a05e2c890e52f2e627275406fcb701608469ab5a0cd57743aef63a33a7edba3433efa5c49d03e20b17e221f1cc45", 0x1000}], 0x1)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{}, 'port0\x00'})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  396.572379] input: syz0 as /devices/virtual/input/input9
11:58:00 executing program 4:
prlimit64(0x0, 0x4, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, 0x0, 0x0)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x2, {0xffff}}, 0x18)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = gettid()
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x16c)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r2 = getpgid(0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x50800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffff}, r2, 0xffffffffffffffff, r3, 0x0)
syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x3, 0x201)
ptrace$setopts(0x4206, r2, 0x0, 0x0)

[  397.077751] audit: type=1800 audit(1590667080.975:517): pid=18864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=15960 res=0
11:58:01 executing program 5:
prctl$PR_SET_NAME(0xf, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

11:58:01 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x9b49b13762ed8e62, 0x6, {0x0, 0x11}}, 0x20)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x4)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x3, 0x0, [{0xc0000001, 0x0, 0x0, 0x7523752e, 0xffffffff, 0x9, 0x1}, {0xc0000000, 0x100, 0x0, 0x8, 0x8, 0x1f, 0x200}, {0x140000001, 0xa02, 0x7, 0x5cb4, 0x8, 0x3, 0x6}]})
ftruncate(r3, 0x80006)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x6, 0x40}, 0xc)

11:58:01 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/timer\x00', 0x8000)
poll(&(0x7f0000000340)=[{r0}], 0x1, 0x8)

11:58:01 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa283002020020009000000001d85680c1ba3a20400ff6e280000005e00ff39e38e0d0857aa99b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15ab", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/4089, 0xff9}, {&(0x7f0000001340)=""/146, 0x92}, {&(0x7f0000001400)=""/99, 0x63}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f00000016c0)=""/252, 0xfc}], 0x7}}], 0x1, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x50300, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

11:58:01 executing program 5:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @random="a08944193839"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = accept4$nfc_llcp(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x800)
connect$nfc_llcp(r4, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x6, 0xc4, 0x80, "51dc7907df8aca9233a8657172f24d027319d42f2a7110422988864d362c418dd6ce3da5f13f383c222f49bdfd57d150b7da9ea956c8fa7bb5a92a3495ae14", 0x25}, 0x60)
r5 = socket$kcm(0x2, 0x6, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'vlan0\x00', @broadcast})

[  397.639238] device vlan0 entered promiscuous mode
11:58:02 executing program 1:
openat$urandom(0xffffffffffffff9c, &(0x7f0000001000)='/dev/urandom\x00', 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000400", @ANYRES16=r5, @ANYBLOB="040026bd7000fbdbdf250a0000000c006e8004000100040002000500080002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x20080840)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x2000}]}}, 0x0, 0x26}, 0x20)
r6 = dup(0xffffffffffffffff)
read$FUSE(r6, &(0x7f0000000000), 0x1000)

11:58:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x4)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000280)={0x0, &(0x7f00000003c0)=""/76})
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000180)=""/44})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00')
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x4000004)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00')
preadv(r3, &(0x7f0000000500), 0x0, 0x80000001)

11:58:02 executing program 4:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x810180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
dup(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000140)={0xf0f041})
connect(r2, &(0x7f0000000080)=@x25={0x9, @remote={[], 0x1}}, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x26)
ptrace$cont(0x18, r1, 0x0, 0xeac5)
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x0, 0x3f})
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)

11:58:02 executing program 5:
r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r2}, 0x80000001, 0x559, 0x3})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x2, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}}}}, 0xa0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000))
setresuid(0x0, r4, 0xee00)
setfsuid(r4)

11:58:02 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440)='NLBL_CIPSOv4\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)=0x8001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80004044}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:58:02 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000))
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3)
sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded89748", 0x1a, 0xe, 0x0, 0x0)

11:58:02 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
rt_sigaction(0x14, &(0x7f0000000200)={&(0x7f0000000140)="64650f4bc53e4180ccf5a4400fb7912700000066440fdb273ef2412be7f26d2e66410f00ef6640f13e360f3801b96abcad95", 0x80000000, &(0x7f0000000180)="c441e459af00000000c40171daa800000000c462b502c00fc78d0000000045115724f20f5c8f54020000c403f50dce00400f1a9a0500000043dbeff34190", {[0x40]}}, &(0x7f00000002c0)={&(0x7f0000000280)="c48255051a8ca3f49b000044de945d0000000067410f38c83242df690b8f0978d11f0fef4e99c4a2cd8e620a986567f3400f11de", 0x0, &(0x7f0000000340)="c461fe70c5070f01dd8f4830a36c130d0ec443c57f4ba674c4637d0483cc910000f5660fd58b9a00000041c17051fe3666400f62860080000036420ff8e3c4027d3320"}, 0x8, &(0x7f00000003c0))
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x80000001], 0x1, 0x800, 0x0, r0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a000100767863616e"], 0x48}}, 0x0)

[  398.230605] vivid-009: disconnect
[  398.263435] vivid-009: reconnect
11:58:02 executing program 4:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0)
ftruncate(r0, 0x48280)
syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000240)='Y`', 0x2, 0x5}, {&(0x7f0000000580), 0x0, 0x3ff}, {&(0x7f0000000640)="e771fa4ad8b282a136aa6abb30edfde1d6b1fd7272c1276758942b86d2467128556155f3994bbcc93ecdc235d25c5ee91b05acbb037f934715d44a689586bf4968baf3533c512ca69174fbc0", 0x4c, 0x9}], 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='dax,smackfsroot=', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imksig,smackfshat=,fowner>', @ANYRESDEC, @ANYBLOB="2c6f626578833d757365725f752c"])
r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @sliced={0x0, [0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb0, 0x9, 0x81, 0xbe, 0x0, 0x3ff, 0x2, 0x0, 0xffff, 0x4, 0x0, 0x3, 0x3, 0xbac6, 0x18, 0x0, 0x0, 0x8201, 0x0, 0x8, 0x0, 0x0, 0x8, 0x40, 0x4, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x9, 0x59d6, 0x0, 0xf2f], 0x5}})
r5 = open(0x0, 0x141042, 0x0)
fdatasync(r4)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9})
dup(0xffffffffffffffff)

11:58:02 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x24002, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0xe, 0xaec, 0x7}, &(0x7f0000000280)=0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1}}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="f0530c6d78976491497c0c1579d2693774437ea5ced7fb3f8f0bb4f47258c879085512ffcefc92979e8926732a5aea93ba5fc7cc14db80f0feda19bf5d56a717e2825c20312d5c4448d4d2cacfe357a63b0d6c214abbe7b3fe", 0x59}], 0x1)

11:58:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
waitid(0x1, 0x0, &(0x7f00000002c0), 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0xb48, 0x1f, 0x10001, 0x0, 0x4}, 0x0)
pipe(&(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
modify_ldt$write(0x1, &(0x7f00000000c0)={0xd3a2, 0xffffffffffffffff}, 0x10)
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10000003, 0x0, 0x7d25, 0x0, 0x0, 0x5, 0x4, 0x40020}, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
r2 = creat(0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000880)=ANY=[], 0x2e6)
getpid()
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
dup(0xffffffffffffffff)
bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x87fff)

11:58:02 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@null)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r2, &(0x7f0000000080)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x2c)
sendfile(r2, r2, &(0x7f0000001000), 0xffff)
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)

11:58:02 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x9, 0x5b, 0xffffffffffffff9e, 0x1, 0x9, 0x4, 0x8, 0xffff, 0xe2, 0x3, 0x401, 0x101, 0xffffffffa1310030, 0xfffffffffffffe53, 0x10000, 0x1], 0x100000, 0x20000})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x9, 0x2, 0xfffffffa}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:58:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xdd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r1, 0x0, 0x3f7)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0x3, 0x0, "59f7dbe480286b799f5fdb2992bd07cbd524f4e1b1bfc196f618405dc4d1b6002f3beae97ac7e743b11c4402b1583843256e8715b923924072bcafdbb62aa3c86f349dd74406ba73316842c4bed51dda"}, 0xd8)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
ftruncate(r3, 0x80006)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x5c, 0xf6, 0x6, 0xb, 0x80000001, 0x81})

11:58:03 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
getpeername(r0, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x80)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
fchmodat(r1, &(0x7f0000000180)='./file0/file0\x00', 0x5)
socket$inet6(0xa, 0x3, 0x2)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x1}], {0x4, 0x2}, [{}], {0x10, 0x2}}, 0x34, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000800)='./file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0)

11:58:03 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x169, &(0x7f0000000200)="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"}}], 0x1c)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000193c0)={0x1, 0x0, {0x3, 0x93c2, 0x1017, 0x0, 0xb, 0x3, 0x0, 0x4}})
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000001c0))
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffff7, 0x6, 0x2024, 0x0, 0x1, 0x1, 0x1, 0x4}})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

11:58:03 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000dbc5a421"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0xffffffff, 0x8})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r3, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r3, 0x0, 0xfffffecc)
r4 = dup3(r3, 0xffffffffffffffff, 0x80000)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
fcntl$notify(0xffffffffffffffff, 0x402, 0x12)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:58:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x1fb}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r3, 0x300, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x4c}}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20048880)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r4, 0x0, 0xfffffecc)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e20, 0x8, @remote, 0x2}}}, 0x32)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x437)
syz_open_dev$ndb(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000044)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x154, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4001}, 0x20040004)

11:58:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ustat(0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:58:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r1, 0x80006)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/235)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  399.559612] block nbd4: Receive control failed (result -107)
[  399.583499] block nbd4: Attempted send on invalid socket
[  399.589464] block nbd4: shutting down sockets
[  399.593981] print_req_error: I/O error, dev nbd4, sector 0
[  399.600287] Buffer I/O error on dev nbd4, logical block 0, async page read
11:58:03 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@null)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r2, &(0x7f0000000080)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d73212bb9f40a8c2356314dd4796d442c0e38c728b2c6ddf2959ac51ce026e38bcd5c9b3845bd5727bc4db2ff4fa309204f778ecd77890a9dee6293bfb76d0878270ae8621e110520072cfd80b21d57b101d599b1b2b6d872fc32070000006506de922db1230b3b750d71b410b9c0847e9ac67e31645ebe5e3e634b48490833196dd3ce0c699db1d93a689383592d07eedd78f60b0304f029082ec097fa2965a8da649242f831ffde32ae2975073e2cf7fe39599a3aebc5750b5e7f7bd66b652363654d4c9de19aa6833eeaada3890587fd1898d4af2639f6fd14f98d541ebd2b3ecb71894d348287897f7987809aef12816bca642b67003106322df02df976b814d1621478d5cb807542199427080000002bc378e45a986eb7bd47515542fac09136e776f5dcaff15b3f2b3e225e0837ddd607dfdca89d99d08e4220ce34a95c5544e27db7938d088cbc5996770e5c273b78b64154a6c9a99a1ab4aa9468b415eade75c2534769cff5127c60373838644e2ae14067d71a0875eaf7dc03a4d2b4bd74df24277513254a38c3ea4bd81a794426e6822a3e0533fc5ade75b728a8d5d3a0cb15eb205cc2e675a0c7ce7948dfe56f7bad87750a92228c2f694dc2a9ae9dd239265fdeec24ce345e73fb0d4d000000008492114282ad9ea5b2e1c6fee0bac7bf66beede08da0377bf301b5a8d3ec5e13d19d15039532"], 0x2c)
sendfile(r2, r2, &(0x7f0000001000), 0xffff)
prctl$PR_GET_SECCOMP(0x15)
syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)

[  399.613564] print_req_error: I/O error, dev nbd4, sector 2
[  399.619386] Buffer I/O error on dev nbd4, logical block 1, async page read
[  399.626990] print_req_error: I/O error, dev nbd4, sector 4
[  399.632688] Buffer I/O error on dev nbd4, logical block 2, async page read
[  399.640317] Buffer I/O error on dev nbd4, logical block 3, async page read
[  399.648427] print_req_error: I/O error, dev nbd4, sector 0
[  399.654457] Buffer I/O error on dev nbd4, logical block 0, async page read
[  399.662262] print_req_error: I/O error, dev nbd4, sector 2
[  399.668030] Buffer I/O error on dev nbd4, logical block 1, async page read
[  399.675350] print_req_error: I/O error, dev nbd4, sector 4
[  399.681069] Buffer I/O error on dev nbd4, logical block 2, async page read
[  399.690360] Buffer I/O error on dev nbd4, logical block 3, async page read
[  399.697839] print_req_error: I/O error, dev nbd4, sector 0
[  399.703699] Buffer I/O error on dev nbd4, logical block 0, async page read
[  399.711111] print_req_error: I/O error, dev nbd4, sector 2
[  399.717162] Buffer I/O error on dev nbd4, logical block 1, async page read
[  399.724513] print_req_error: I/O error, dev nbd4, sector 0
[  399.730588] print_req_error: I/O error, dev nbd4, sector 2
[  399.740584] ldm_validate_partition_table(): Disk read failed.
[  399.754591] Dev nbd4: unable to read RDB block 0
[  399.788691]  nbd4: unable to read partition table
[  399.802296] kauditd_printk_skb: 12 callbacks suppressed
[  399.802304] audit: type=1800 audit(1590667083.695:530): pid=19115 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16565 res=0
11:58:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x24002, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0xe, 0xaec, 0x7}, &(0x7f0000000280)=0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1}}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="f0530c6d78976491497c0c1579d2693774437ea5ced7fb3f8f0bb4f47258c879085512ffcefc92979e8926732a5aea93ba5fc7cc14db80f0feda19bf5d56a717e2825c20312d5c4448d4d2cacfe357a63b0d6c214abbe7b3fe", 0x59}], 0x1)

11:58:04 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x100, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x40, 0x0)
ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000002c0)=0x2)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x1, 0x5, 0xd475, 0x100, 0x7171, 0x80000000, r4})
shmctl$SHM_LOCK(0x0, 0xb)

11:58:04 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x505001, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa24b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000400)='G', 0x1}], 0x1, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x3f, 0x0, 0x80, 0x0, 0x0, 0x9, 0x80041, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x200, 0x2, 0x180000, 0x2, 0x4, 0x3f, 0xccba}, r1, 0x6, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x1f}, &(0x7f00000002c0)=0x8)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x0, 0x0, 0x2bd6dc00, 0x0, 0x3, 0x2})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000c, 0x11, 0xffffffffffffffff, 0x544e2000)
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)

11:58:04 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$inet(0x2, 0x3, 0x33)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040), 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
r4 = open(0x0, 0x0, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

[  400.287171] block nbd4: Receive control failed (result -107)
[  400.301374] block nbd4: shutting down sockets
11:58:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_0\x00'})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  400.530790] audit: type=1800 audit(1590667084.425:531): pid=19117 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16565 res=0
11:58:04 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb)
sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010000, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0x594}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="17090000000000000000010000000500070004000000080009000000000814002000fc02000000000000000000000000000108000a0000000000060002000100000014001f"], 0x5c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x18c, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40000)

[  400.727356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
11:58:06 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_0\x00'})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

11:58:06 executing program 3:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$inet(0x2, 0x3, 0x33)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040), 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
r4 = open(0x0, 0x0, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

11:58:06 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0xfffffffd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700012c4c23a8134fd9cb89205d7e68ed55b3788f69954d6068dc1bb2f03a753d5a8be4b2c700f42e51d39bb9a0b083d42981979acf1d7cf689d6116a0bf76a4c57d196710190970fec9c8bddfff574debf2dcf8b68f6c7811960e4b24ea435468788dd42ef2eda9c75b340312021a543ba1a4e52fd4cc2d80b5e4c4bbf09a45eed4055b3"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00771b0700480501fa2b1cbbee8efb", @ANYRES32=r7, @ANYBLOB="0000ff000a000200cd"], 0x28}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)

11:58:06 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x200500, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000714200027bd7000fddbdf250800010002000000080001000000000008004400", @ANYRES32=r4, @ANYBLOB="b1f52ca159613893e403869b101e946509e680ef779df2bcd0"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40014)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002e0007d000"/20, @ANYRES32=r6, @ANYBLOB="01000000000000000000f1ff"], 0x30}}, 0x0)

11:58:06 executing program 4:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133)
socket$inet(0x2, 0x3, 0x33)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040), 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
r4 = open(0x0, 0x0, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

11:58:06 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0x76)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x4, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r1}, 0x40)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  402.382403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=19184 comm=syz-executor.1
[  402.412204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
11:58:06 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000340)="0f01c30f009e9e260f8e020066b80c0000000f23d80f21f86635400000100f23f8f20f23bfb867000f00d8bad004b018ee66b9e70800000f323e0f01c90f20c06635000000800f22c0", 0x49}], 0x1, 0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:58:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/8, 0x8}], 0x1, &(0x7f0000000480)=""/144, 0x90}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005f40)=@generic, 0x80, &(0x7f0000006000)}, 0x1}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000006c0)={0x800, 0xed1, 0x5, 0x1f, 0x4, [{0x5, 0x8, 0x0, [], 0x1000}, {0x2bda, 0x400, 0x2, [], 0x903}, {0x8, 0x400, 0x400, [], 0x1000}, {0x996, 0xffff, 0xffffffffffff0001, [], 0x2000}]})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000007000000000000000300000000000000", @ANYRES32, @ANYBLOB="0000000066e400"/28, @ANYRES32=r2, @ANYBLOB="0000009b1f1d37118d3b670004", @ANYRES32, @ANYBLOB="000000008100"/28])
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x2}, 0x8)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002780)={&(0x7f0000000980)=ANY=[], 0x5d4}, 0x1, 0x0, 0x0, 0x800}, 0x8044)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00007093739ca30b2391688c1e55469e80018daec05f0bf21ad48477b2e7361888a699a53d2b032f60409e3a6b18d149e3a8ba74"])
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
gettid()

[  402.436296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.552532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.579461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=19184 comm=syz-executor.1
[  402.592556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.682799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.704269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.755411] audit: type=1800 audit(1590667086.645:532): pid=19208 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16584 res=0
11:58:06 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=""/196, 0xc4)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000680)=ANY=[], 0x2a8)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4c22, @multicast1=0xe0000002}, {0x2, 0x4e23, @dev}, {0x2, 0x0, @dev}, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x10)
mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x7a3})
perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x40)

11:58:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000580)=""/157, 0x9d}, {0x0}], 0x4}}], 0x1, 0x0, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
sendto$ax25(0xffffffffffffffff, &(0x7f0000000700)="1c45ea1297d91f0fdd5a827cf8105bcbb7638663296a1a93a4349cd926bec9eede22636c79f6741b159ddf0faba1181727f3082e8deb43b4d64a8a5a19f8f91598e25102c354287e2e2964349b6669e957b7ffbc2e2893d46343801cc6acf4d1acae42f65a27f767ea7009620b1837f1f18234849682ba7ba87fffed6ee249e7f5144f9d2df4f09a73ba04c20a3011e1ef8f379c4c61fe04a4070543b3ea433810b8dfb31223fe1503b20aea80185202fb901aa31dc6521b0279b0", 0xbb, 0x44000, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r3, 0x800)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000001840)='./bus\x00', 0x4040, 0x0)
sendfile(r3, r4, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000040)='./bus\x00', 0x141)

11:58:07 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0)=0x5, &(0x7f0000000340)=0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
setrlimit(0xc, &(0x7f0000000180)={0x800, 0x55})
shmctl$SHM_LOCK(0x0, 0xb)

[  403.037776] audit: type=1804 audit(1590667086.935:533): pid=19231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir917432754/syzkaller.fpgM2m/247/bus" dev="sda1" ino=16586 res=1
[  403.081648] audit: type=1800 audit(1590667086.935:534): pid=19231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16586 res=0
11:58:07 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x30)
clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x6, 0x7, 0x95, 0x0, 0xd, "73f3dc6355646b8dfb6787ba5efb37567c6b4a"})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r4, &(0x7f0000000500), 0x37d, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendto$llc(r5, &(0x7f0000000200)="8503f5719d5ede4d7999c5bf757cdadb2417542da1d24db4f9079e76c923037750db34dba1eb62e6ff25c5074a424002f90d07819d6e66a5b9a0b4d4eedca3c92b294b4b42e8043b1f4513620ae36c98b4e97140c2117ca7c7bcb09a55b9bf689ad4ef19611649f93eae7615c1de0a23b48390a584ecdca29186f60fd83adb9bb2ec27647e852f11f19199a6feade71891f3ef0c8ee7a1b4dd72e9c58314f6f5d46a3466814eef088920f8085b32f8", 0xaf, 0x40000, &(0x7f0000000100)={0x1a, 0x204, 0x6, 0x1, 0xff, 0x1, @local}, 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x0)

11:58:07 executing program 4:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x9cf301bd52e97841}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x24000011)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'cp863'}}]})

[  403.122543] audit: type=1804 audit(1590667087.005:535): pid=19237 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir917432754/syzkaller.fpgM2m/247/bus" dev="sda1" ino=16586 res=1
11:58:07 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000080)={r1, 0x80000000})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xfff)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000040)={0xe6, &(0x7f0000000180)=""/230})

[  403.269776] hfsplus: unable to find HFS+ superblock
11:58:07 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x30)
clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x6, 0x7, 0x95, 0x0, 0xd, "73f3dc6355646b8dfb6787ba5efb37567c6b4a"})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r4, &(0x7f0000000500), 0x37d, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendto$llc(r5, &(0x7f0000000200)="8503f5719d5ede4d7999c5bf757cdadb2417542da1d24db4f9079e76c923037750db34dba1eb62e6ff25c5074a424002f90d07819d6e66a5b9a0b4d4eedca3c92b294b4b42e8043b1f4513620ae36c98b4e97140c2117ca7c7bcb09a55b9bf689ad4ef19611649f93eae7615c1de0a23b48390a584ecdca29186f60fd83adb9bb2ec27647e852f11f19199a6feade71891f3ef0c8ee7a1b4dd72e9c58314f6f5d46a3466814eef088920f8085b32f8", 0xaf, 0x40000, &(0x7f0000000100)={0x1a, 0x204, 0x6, 0x1, 0xff, 0x1, @local}, 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x0)

[  403.552280] audit: type=1800 audit(1590667087.445:536): pid=19262 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16577 res=0
11:58:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf233}, 0x0, 0x0, 0x7, 0x3ff, 0x5, 0x0, 0x6, 0x3ff, 0x3ff, 0x8})
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
gettid()
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1)
write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="230228efb4a24fe846892bc04b11d9d8d21d5d6fe0eb92552fba4784466ebedb04000600bb5d0bee96412025c1d1ede6c1f37b9c352ef85800004380a8cf359a30a74dc68c37cfbef5c16f3e648860faf8228b5b7cc2cba5236e1882c601f2b49e32098f691974f23c995de2be4e7b3881c92986a1aba827995c4ea9172e23931c9f9abb4a2956cfba8227afd19e8f3cbf7be22e152bc74e1436c9cbafacbe4b03ba4b656f902932217bf0bcc1d55d8c32a68b56f30d50200000004aa86cb2c50de431490df98479af5e9ccd3c36c416e6ba34d30721ffc6933bff01000000000000428f750e12bf410b852c6008250f2fe940ed50dc3a13984b627b85d0809e6a420000a94f8aea00eacf02770b1a212dc1b7aaf9da3a56bafd903dda39d4b228768cf60c9166fd918a0957297ea07a34ddb84a0091572e7ec182243047cb8d55402700b82b8f9acd3900e6cb61e263414da54af757d7cf71b6db273fc46f537cd0ba35f41c5798eef6118458a9b7e910a37f5f8b7e5fec9fedd84c94eb099a7a1e4126248d2cd464c52e927c173badc285b908a6354041791dbdd4000886da9b7a1f3f066bd999e3f05e74d714ecf58d608393ee9cbc170b3d929ef0685da5e11119177e407acee08d80fd5205465e826271dcf1d4e9f9b321762fbe67cc1aad078f16786e73af46094311fc15b3b32eddb5afccdd42f0aed750e9d7c26974ba244c9e8580fafb98c533c9be66645ede09db00000000000017cf1dc0e92250bf6d314ecf82587a2adeef91a316e9daab3f51e20a2f89698f6132ff7ca2cb60424b9def1beec04724cbed4701db372db744683100000000000000000000000000b370bd836fb4dad7dddda00b744d7b9fc6597b939319bd4434cf3bac74ac1ef0027a51600cb3e24883947a6710000008000000f45479403b6771ac12c78f50de865ae6cffff2aec241c2f71cb60966ebef90c6f8c4c5a5022d90dddc11cbaf27a74b1a920f4751f0c5a74692be3e7a6c38a1b958041ad20dbb78739cf2b156cf00cf2801d303cec0d7bb0da69d8880baf3e46fb0cae5d68c65303158d04519ba"], 0x2f2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r4 = getpid()
tkill(r4, 0x0)

11:58:08 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000bb009ea9434503ea74a6f29e31ce1a5e769bb2962c794275795baabe81dac29847eacafc6c083516c3354d4d4c5d5f491a257cb8c1f839f1f81fcd5857330bc0453a97bbedbdb8f77f68691702cc4de81a3c0b2774f12c6ebd4ab2ad87f74d7b938729c78c97279eb6ab6563e32878f3adbfc4c72e290a11d8e2c3e9b5610a606da948f4f7638b37dfb83aec28b709e649b238a26e8f83db6b1458274dc3eb1101f6246aeb991bcd7826ed010ae7367b72e3cc9ccb4c69dd9f1347dce2"], 0xc1)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
statx(r2, &(0x7f0000000040)='./bus\x00', 0x800, 0x10, &(0x7f0000000400))
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}})

[  404.150383] audit: type=1804 audit(1590667088.035:537): pid=19290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir917432754/syzkaller.fpgM2m/247/bus" dev="sda1" ino=16586 res=1
11:58:08 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r2, 0x0, 0xfffffecc)
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./bus\x00', 0x79e535d7, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2])

[  404.217873] overlayfs: filesystem on './file0' not supported as upperdir
11:58:08 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x30)
clone(0x10000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x6, 0x7, 0x95, 0x0, 0xd, "73f3dc6355646b8dfb6787ba5efb37567c6b4a"})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r4, &(0x7f0000000500), 0x37d, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
sendto$llc(r5, &(0x7f0000000200)="8503f5719d5ede4d7999c5bf757cdadb2417542da1d24db4f9079e76c923037750db34dba1eb62e6ff25c5074a424002f90d07819d6e66a5b9a0b4d4eedca3c92b294b4b42e8043b1f4513620ae36c98b4e97140c2117ca7c7bcb09a55b9bf689ad4ef19611649f93eae7615c1de0a23b48390a584ecdca29186f60fd83adb9bb2ec27647e852f11f19199a6feade71891f3ef0c8ee7a1b4dd72e9c58314f6f5d46a3466814eef088920f8085b32f8", 0xaf, 0x40000, &(0x7f0000000100)={0x1a, 0x204, 0x6, 0x1, 0xff, 0x1, @local}, 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x0)

11:58:08 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r3 = dup(0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0xf0f041})
poll(&(0x7f0000000000)=[{r5}], 0x1, 0x0)
r6 = dup3(r3, r5, 0x80000)
sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000005a0001002dbd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08222ad392de07092a29ac96f5a6c685102c1728f2b2ca7c035d8cc8fbdf22ea44c80e87f3d44400000000000001a5613bc45d969d317c497cb70840eb145783a4804fb788", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x2c}}, 0x4050001)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1000}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x40880)

11:58:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000180)="9bd83f159e1bc4737d9ab66e7e0ef7100d2e01", 0x13, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = syz_open_dev$vcsa(&(0x7f0000000600)='/dev/vcsa#\x00', 0xe63, 0xef450dafd4eaf71b)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r1, r3, 0x0, 0x8000fffffffe)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000280)=0xff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000002c0)=@builtin='builtin_trusted\x00')
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r4)
keyctl$unlink(0x9, r0, r4)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

[  404.312232] audit: type=1800 audit(1590667088.035:538): pid=19290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16586 res=0
11:58:08 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r3, 0x80006)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'gre0\x00', {0x80}, 0x7})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x4)

[  404.366228] hfs: unable to parse mount options
[  404.383648] audit: type=1804 audit(1590667088.035:539): pid=19290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir917432754/syzkaller.fpgM2m/247/bus" dev="sda1" ino=16586 res=1
[  404.565521] vivid-001: disconnect
[  404.667703] 9pnet: Insufficient options for proto=fd
11:58:08 executing program 3:
socket$inet6(0xa, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000079a1cef5474fda89b900040002c008000a0036459cdb26cd03dcb7e638a66c866a951362d3fa98550387f45bfb4e8069c2b187cfba71e42579c67da646fceaa7d4ffd82c651009da5ba8a82cbbbe3a9f17be042eb001d5ae8f97e18af42e3e236016efcbc8ab13d59f61511c3ca8e02476cc9e7215ef1ab6a24d61e5dab4d83b8ba3e53f1214873aa1eef25c4fadf362", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r1}, 0x14)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={r1, 0x800, 0x3}, 0x8)
pipe(0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x80]}, 0x8, 0x180800)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x20)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000640)=ANY=[@ANYBLOB="070000000000000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000000300000000000000000000000000000000000001d976c1102f00f280707ff2ca9c73eb90178e00000000"])
dup(r2)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1)

11:58:08 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001810e0a8dbc51700"], 0x0, 0x80}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000180)=0x7)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000824000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
shmctl$SHM_LOCK(0x0, 0xb)

11:58:08 executing program 4:
syz_open_dev$loop(0x0, 0x6, 0x14600)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9002, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x105182)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(0xffffffffffffffff, 0x80006)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01008f0000000000000006000000000000000b0300000000000000726f6164636173742d9f816e6b00000bb09a63285c11939fa8c8731eebc8d962ab4d85cb053330e6073e40e8004fa7c8a2ca974b38775910efd077f8db2af3c8812dce7a45cca2ce25af2d67cc1dbe582d144f2f35041f07978aaad0bc8c755aafc0437e67a0b02ddf4d1956230e9b6c993627671f785af069cecdc626e398165f40243700000000"], 0x30}}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020028bd7000fcdbdf25010000000000000002410000001000137564703a73797a30000000009d3f545bfd5d4954b45b0435259c63e0081d869dbed69f55d0499b7c431aa9effd07952b41d412a305e6f8904f78309935d9df5a01f41a548a39c58534025cc5a5e45b69677472f5f980b26d3b1e400dba489378abea94907d12536940227a238897f0055e08182dc3ae986ebc8e9d270394c7c024851e594c5b2091158c8f4a474519465653c526f1d646d3fa8cf1a7d8d528992c1a9560944160536bf0321332aa697e082485b3ff5736fb834a8b59bb4f4ec558cb89c4f4f74cb8fa7b2b"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="1ceb4018548479e230d4b00702a973ceb2c4119c2ecdccaf8d01000000000000000678971c945293b2a5dc98404fc3a65bb75507ac38c167464a92847024540559e43502f3cd03e93f10ee24916cbe9df268483d6132217ac7beb9", 0x5b}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x24000000)

[  404.959620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  404.972265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
11:58:09 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3f7, 0x8, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4055}, 0x24000000)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r4, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r4, 0x80006)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80008a00}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="289797e8a15b8c7e7235a5db0000000a0a01010000000000000000030000090840000000020c0000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20000800)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

[  405.069024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  405.078372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
11:58:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket(0x1e, 0x2, 0x7ff)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x205, 0x0, &(0x7f0000000100), 0x74, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r5, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r5, 0x80006)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='wlan0&[$@\',&cpuset\x89wlan0\x00')

11:58:09 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x400, 0x0)
getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000140)=0x51cc8013, &(0x7f0000000180)=0x4)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000010000543000000000000421ba3a20400ff7e280000001100ff", 0x2b}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800090000b70000", 0x52)

11:58:09 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x5, 0x3, 0x2})

[  405.162539] kauditd_printk_skb: 5 callbacks suppressed
[  405.162547] audit: type=1800 audit(1590667089.055:545): pid=19302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=15832 res=0
[  405.195964] vivid-001: reconnect
11:58:09 executing program 3:
perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000000080)=@pppol2tp, 0x80)
write$binfmt_misc(r1, 0x0, 0xfffffecc)
write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000002ed8e4f96765ce27b90300060000000000000000b738000000000035f4c384aa73899542a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d6039067088d7c27f000000a1"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getpid()
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @empty}, &(0x7f00000005c0)=0xc)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r2, &(0x7f0000001400)="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"/3584, 0xe00)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000100)={0xb8, 0x6d})
fadvise64(r3, 0x4, 0x1, 0x1)
fallocate(r2, 0x11, 0x0, 0x10000)
sendfile(r2, r3, 0x0, 0x11f08)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040))
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="5a0d39de92279a9691e14422058d41d81d894fa8ae41940bd3f5b53f7f1c6c71665eb6ccbcea6061b310118412b0206e4f0d7ce07a2df010de438cdab88fe6a53f85e91ad9f69fa3530afaf8c6416898c765ad773957bdf1b4146f6481a046e4425472e95e0b5f3459d39496ed88ffffffffffffff57c122bfb24fee91ebb798b3a0cff3c4aff9a5de8cb3700f1c488fe39142523172590108e8f08d2ff148937ea10378e88835d6ad89b0c6463a4034ecc261", 0xb3}], 0x1, 0x0)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000180)=0x3)

11:58:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1fb216062455522d080dc93d18a13269163ea31e7fe92b92d5c6b05414cd2001e733b0e970f164f0610572c860b3e2b10dd946d4ebed37d038788040fe7baaf24d2d95ad9b2995fd2cde86b88837e1ba3f98c7a6619ba3eb5ecb1375a7c7da0000"], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa961511790d39d34)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x11c000})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  405.273857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  405.304764] vivid-001: disconnect
[  405.318127] vivid-001: reconnect
11:58:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x145742, 0x1d)
write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4)
ftruncate(r2, 0x80006)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000180)=""/229)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x101, 0x82d, 0x8, 0xffffff80, 0x7})

[  405.325139] audit: type=1800 audit(1590667089.105:546): pid=19343 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15988 res=0
11:58:09 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x800, @mcast2, 0x6}, 0x1c)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r2)
request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='proc\x00', r2)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x3, 0x3, 0x0, 0xfffc}}, 0x80)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100))
write$binfmt_misc(r4, 0x0, 0xfffffecc)
sendfile(r3, r4, 0x0, 0x4)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r6, &(0x7f00000000c0)=[{0x10081, 0x5}], 0x1c)

[  405.421282] audit: type=1800 audit(1590667089.125:547): pid=19339 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=15971 res=0
[  405.461399] audit: type=1800 audit(1590667089.135:548): pid=19383 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=15832 res=0
11:58:09 executing program 5:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x5, 0x3, 0x2})

[  405.509722] audit: type=1800 audit(1590667089.275:549): pid=19400 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=15961 res=0
[  405.580232] audit: type=1800 audit(1590667089.345:550): pid=19401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=15971 res=0
[  405.627360] audit: type=1804 audit(1590667089.355:551): pid=19401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir940846854/syzkaller.LQFJfo/256/file0" dev="sda1" ino=15971 res=1
11:58:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

[  405.714014] audit: type=1800 audit(1590667089.435:552): pid=19414 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16065 res=0
[  405.873458] ------------[ cut here ]------------
[  405.878715] WARNING: CPU: 0 PID: 19352 at arch/x86/kvm/vmx.c:6950 handle_ept_misconfig+0x11f/0x430
[  405.887829] Kernel panic - not syncing: panic_on_warn set ...
[  405.887829] 
[  405.895211] CPU: 0 PID: 19352 Comm: syz-executor.2 Not tainted 4.14.182-syzkaller #0
[  405.903092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  405.912465] Call Trace:
[  405.915065]  dump_stack+0x1b2/0x283
[  405.918706]  panic+0x1f9/0x42d
[  405.921992]  ? add_taint.cold+0x16/0x16
[  405.925977]  ? handle_ept_misconfig+0x11f/0x430
[  405.930650]  ? __warn.cold+0x14/0x30
[  405.934549]  ? handle_ept_misconfig+0x11f/0x430
[  405.939221]  __warn.cold+0x2f/0x30
[  405.942767]  ? ist_end_non_atomic+0x10/0x10
[  405.947093]  ? handle_ept_misconfig+0x11f/0x430
[  405.951769]  report_bug+0x20a/0x248
[  405.955408]  do_error_trap+0x195/0x2d0
[  405.959312]  ? math_error+0x2d0/0x2d0
[  405.963123]  ? kvm_host_page_size+0x121/0x140
[  405.967624]  ? mapping_level+0xff/0x3e0
[  405.971616]  ? handle_abnormal_pfn+0x50/0x3a0
[  405.976124]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  405.980999]  invalid_op+0x1b/0x40
[  405.984524] RIP: 0010:handle_ept_misconfig+0x11f/0x430
[  405.989793] RSP: 0018:ffff8880558b7a78 EFLAGS: 00010202
[  405.995158] RAX: 0000000000040000 RBX: ffffffff8114e520 RCX: ffffc90007722000
[  406.002429] RDX: 0000000000025bc0 RSI: ffffffff8114e63f RDI: ffff88804f5a9200
[  406.009700] RBP: ffff88804f5a9200 R08: 0000000000000007 R09: ffff8880558b79b8
[  406.017080] R10: ffff88804b6c0a18 R11: ffff88804b6c0140 R12: 00000000fffffff2
[  406.024353] R13: 0000000000000000 R14: ffff88804f5a9200 R15: dffffc0000000000
[  406.031726]  ? handle_invd+0x30/0x30
[  406.035536]  ? handle_ept_misconfig+0x11f/0x430
[  406.040216]  ? handle_ept_misconfig+0x11f/0x430
[  406.044884]  ? handle_invd+0x30/0x30
[  406.048605]  vmx_handle_exit+0x1f8/0x12e0
[  406.052761]  kvm_arch_vcpu_ioctl_run+0x1fd7/0x58f0
[  406.057714]  ? kvm_arch_vcpu_runnable+0x520/0x520
[  406.062562]  ? lock_acquire+0x170/0x3f0
[  406.067505]  ? lock_downgrade+0x6e0/0x6e0
[  406.071665]  ? kvm_vcpu_ioctl+0x3df/0xc70
[  406.075815]  kvm_vcpu_ioctl+0x3df/0xc70
[  406.079799]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  406.085832]  ? check_preemption_disabled+0x35/0x240
[  406.091499]  ? perf_trace_lock+0x109/0x4b0
[  406.095870]  ? perf_trace_lock_acquire+0x4b0/0x4b0
[  406.100835]  ? HARDIRQ_verbose+0x10/0x10
[  406.104952]  ? kvm_vm_ioctl_check_extension_generic+0xb0/0xb0
[  406.110878]  do_vfs_ioctl+0x75a/0xfe0
[  406.114774]  ? selinux_parse_skb.constprop.0+0x16c0/0x16c0
[  406.120409]  ? ioctl_preallocate+0x1a0/0x1a0
[  406.124911]  ? security_file_ioctl+0x76/0xb0
[  406.129414]  ? security_file_ioctl+0x83/0xb0
[  406.133828]  SyS_ioctl+0x7f/0xb0
[  406.137196]  ? do_vfs_ioctl+0xfe0/0xfe0
[  406.141178]  do_syscall_64+0x1d5/0x640
[  406.145111]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  406.150301] RIP: 0033:0x45ca29
[  406.153490] RSP: 002b:00007f0688230c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.155354] audit: type=1800 audit(1590667089.765:553): pid=19439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=15961 res=0
[  406.161304] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29
[  406.161310] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  406.161316] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  406.161322] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  406.161328] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f06882316d4
[  406.184197] Kernel Offset: disabled
[  406.224449] Rebooting in 86400 seconds..