&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  880.933960][   T26] audit: type=1804 audit(1575337146.688:424): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/504/memory.events" dev="sda1" ino=16914 res=1
01:39:06 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, 0x0, 0x0, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:06 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
memfd_create(&(0x7f0000000100)='\x00', 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  881.043358][   T26] audit: type=1800 audit(1575337146.718:425): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16914 res=0
01:39:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:07 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

01:39:07 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:07 executing program 5:
r0 = fsopen(&(0x7f0000000100)='sockfs\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x80)

01:39:07 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}], 0x1, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00')
readv(r2, &(0x7f0000000ac0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1)

01:39:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}], 0x1, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:07 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}], 0x1, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:08 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  882.331689][   T26] audit: type=1804 audit(1575337148.088:426): pid=21047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/505/memory.events" dev="sda1" ino=16993 res=1
01:39:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {0x0}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:08 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0)

[  882.442151][   T26] audit: type=1800 audit(1575337148.088:427): pid=21047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16993 res=0
01:39:08 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:08 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {0x0}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:08 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  883.503725][   T26] audit: type=1804 audit(1575337149.268:428): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/506/memory.events" dev="sda1" ino=16534 res=1
[  883.550497][   T26] audit: type=1800 audit(1575337149.268:429): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16534 res=0
01:39:09 executing program 5:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/snmp6\x00')
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
msgget$private(0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)

[  884.688710][T21112] IPVS: ftp: loaded support on port[0] = 21
[  884.805005][T21112] chnl_net:caif_netlink_parms(): no params data found
[  884.854977][T21112] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.862249][T21112] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.870678][T21112] device bridge_slave_0 entered promiscuous mode
[  884.880427][T21112] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.888150][T21112] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.897064][T21112] device bridge_slave_1 entered promiscuous mode
[  884.927491][T21112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.940233][T21112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  884.973273][T21112] team0: Port device team_slave_0 added
[  884.981436][T21112] team0: Port device team_slave_1 added
[  885.065340][T21112] device hsr_slave_0 entered promiscuous mode
[  885.102680][T21112] device hsr_slave_1 entered promiscuous mode
[  885.142241][T21112] debugfs: Directory 'hsr0' with parent '/' already present!
[  885.167954][T21112] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.175144][T21112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.182556][T21112] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.189662][T21112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  885.261555][T21112] 8021q: adding VLAN 0 to HW filter on device bond0
[  885.280807][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  885.290499][T20439] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.299780][T20439] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.314957][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  886.047790][T21112] 8021q: adding VLAN 0 to HW filter on device team0
[  886.069714][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  886.079562][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  886.088916][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.096051][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  886.114472][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  886.123919][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  886.132416][T20448] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.139534][T20448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  886.148517][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  886.177991][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  886.187401][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  886.196720][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  886.205806][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  886.216094][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  886.224849][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  886.233519][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  886.244855][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  886.252871][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  886.261233][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  886.278359][T21112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  886.306589][T19460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  886.314941][T19460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  886.328749][T21112] 8021q: adding VLAN 0 to HW filter on device batadv0
01:39:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  886.563871][T21122] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  886.577284][T21122] device gretap0 entered promiscuous mode
01:39:12 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000))
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {0x0}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:12 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:12 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:12 executing program 5:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000840)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="9cabbf0451dc1b29419b80008100", 0x5ee}], 0x1}, 0x0)

01:39:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:12 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0xa)
connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4f126d817891da9c}, 0xc)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x40040, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r3, 0x208200)
sendfile(r0, r2, 0x0, 0x8000fffffffe)

01:39:12 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  886.931034][   T26] audit: type=1804 audit(1575337152.688:430): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir223442938/syzkaller.V4eEAR/75/bus" dev="sda1" ino=17073 res=1
01:39:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:12 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="9698dbb56dd68937e5d2369b6932562c029e43409ccf5a90ad2df62fe1bf8994cb96c94632d20745ecae0c794767eff894c9c8b1364d6b6572e027be622949c82c235d02561a23c30a2b42303c03809154b37a1fa4aed60379bbb8b0f2d7976a5497c08ddbaa0091592d02979206791ded742bc74dfa1a057aca0b35c72b202cd1f45e6c9c35dbe9362a659dc3314632f8c7dbcb4ffc7693bc2976a24f3a02138e49ad43efb5762927789ef13fbc", 0xae, 0xfffffffffffffffd)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  887.282456][   T26] audit: type=1804 audit(1575337153.038:431): pid=21137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/507/memory.events" dev="sda1" ino=17121 res=1
[  887.402241][   T26] audit: type=1800 audit(1575337153.068:432): pid=21137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17121 res=0
[  887.518276][   T26] audit: type=1804 audit(1575337153.118:433): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir223442938/syzkaller.V4eEAR/75/bus" dev="sda1" ino=17073 res=1
01:39:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:13 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:13 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:13 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f0000000080)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30)

01:39:13 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
r1 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0))
keyctl$read(0xb, r1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  888.170343][   T26] audit: type=1804 audit(1575337153.928:434): pid=21178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/508/memory.events" dev="sda1" ino=16532 res=1
01:39:14 executing program 5:

01:39:14 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  888.295060][  T173] device bridge_slave_1 left promiscuous mode
[  888.301597][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.315741][   T26] audit: type=1800 audit(1575337153.968:435): pid=21178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16532 res=0
01:39:14 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:14 executing program 5:

[  888.430368][  T173] device bridge_slave_0 left promiscuous mode
[  888.442327][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
01:39:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  888.595717][  T173] device bridge_slave_1 left promiscuous mode
[  888.618847][   T26] audit: type=1804 audit(1575337154.378:436): pid=21197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/509/memory.events" dev="sda1" ino=16533 res=1
01:39:14 executing program 5:

[  888.623025][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.776836][   T26] audit: type=1800 audit(1575337154.428:437): pid=21197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16533 res=0
[  888.842727][  T173] device bridge_slave_0 left promiscuous mode
[  888.862975][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
01:39:14 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:14 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:14 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:14 executing program 5:

[  889.036327][  T173] device bridge_slave_1 left promiscuous mode
[  889.057168][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.098738][   T26] audit: type=1804 audit(1575337154.858:438): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/510/memory.events" dev="sda1" ino=16573 res=1
[  889.155762][  T173] device bridge_slave_0 left promiscuous mode
[  889.164584][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.191374][   T26] audit: type=1800 audit(1575337154.858:439): pid=21226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16573 res=0
[  889.245184][  T173] device bridge_slave_1 left promiscuous mode
[  889.251431][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.334432][  T173] device bridge_slave_0 left promiscuous mode
[  889.340771][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.404147][  T173] device bridge_slave_1 left promiscuous mode
[  889.414161][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.480326][  T173] device bridge_slave_0 left promiscuous mode
[  889.488385][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.556306][  T173] device bridge_slave_1 left promiscuous mode
[  889.562870][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.603558][  T173] device bridge_slave_0 left promiscuous mode
[  889.609780][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.654947][  T173] device bridge_slave_1 left promiscuous mode
[  889.661225][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.703217][  T173] device bridge_slave_0 left promiscuous mode
[  889.709554][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.152710][  T173] device hsr_slave_0 left promiscuous mode
[  909.193166][  T173] device hsr_slave_1 left promiscuous mode
[  909.254852][  T173] team0 (unregistering): Port device team_slave_1 removed
[  909.269782][  T173] team0 (unregistering): Port device team_slave_0 removed
[  909.285041][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.330709][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.515410][  T173] bond0 (unregistering): Released all slaves
[  909.732652][  T173] device hsr_slave_0 left promiscuous mode
[  909.782447][  T173] device hsr_slave_1 left promiscuous mode
[  909.842120][  T173] team0 (unregistering): Port device team_slave_1 removed
[  909.859889][  T173] team0 (unregistering): Port device team_slave_0 removed
[  909.878508][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.933948][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  910.080890][  T173] bond0 (unregistering): Released all slaves
[  910.312855][  T173] device hsr_slave_0 left promiscuous mode
[  910.352346][  T173] device hsr_slave_1 left promiscuous mode
[  910.434320][  T173] team0 (unregistering): Port device team_slave_1 removed
[  910.455514][  T173] team0 (unregistering): Port device team_slave_0 removed
[  910.468024][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  910.530574][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  910.688543][  T173] bond0 (unregistering): Released all slaves
[  910.888639][  T173] device hsr_slave_0 left promiscuous mode
[  910.953204][  T173] device hsr_slave_1 left promiscuous mode
[  911.014862][  T173] team0 (unregistering): Port device team_slave_1 removed
[  911.031565][  T173] team0 (unregistering): Port device team_slave_0 removed
[  911.046707][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  911.114253][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  911.273732][  T173] bond0 (unregistering): Released all slaves
[  911.463096][  T173] device hsr_slave_0 left promiscuous mode
[  911.512230][  T173] device hsr_slave_1 left promiscuous mode
[  911.587100][  T173] team0 (unregistering): Port device team_slave_1 removed
[  911.605797][  T173] team0 (unregistering): Port device team_slave_0 removed
[  911.619873][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  911.671063][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  911.832088][  T173] bond0 (unregistering): Released all slaves
[  912.022780][  T173] device hsr_slave_0 left promiscuous mode
[  912.062357][  T173] device hsr_slave_1 left promiscuous mode
[  912.124949][  T173] team0 (unregistering): Port device team_slave_1 removed
[  912.144563][  T173] team0 (unregistering): Port device team_slave_0 removed
[  912.159553][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  912.228676][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  912.371559][  T173] bond0 (unregistering): Released all slaves
[  912.582573][  T173] device hsr_slave_0 left promiscuous mode
[  912.642190][  T173] device hsr_slave_1 left promiscuous mode
[  912.717230][  T173] team0 (unregistering): Port device team_slave_1 removed
[  912.735201][  T173] team0 (unregistering): Port device team_slave_0 removed
[  912.749896][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  912.800468][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  912.952517][  T173] bond0 (unregistering): Released all slaves
[  913.129744][T21231] IPVS: ftp: loaded support on port[0] = 21
[  913.283790][T21231] chnl_net:caif_netlink_parms(): no params data found
[  913.328150][T21231] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.336286][T21231] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.345255][T21231] device bridge_slave_0 entered promiscuous mode
[  913.354484][T21231] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.361600][T21231] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.370950][T21231] device bridge_slave_1 entered promiscuous mode
[  913.399424][T21231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.417615][T21231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  913.448684][T21231] team0: Port device team_slave_0 added
[  913.459679][T21231] team0: Port device team_slave_1 added
[  913.526391][T21231] device hsr_slave_0 entered promiscuous mode
[  913.562639][T21231] device hsr_slave_1 entered promiscuous mode
[  913.622500][T21231] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.629691][T21231] bridge0: port 2(bridge_slave_1) entered forwarding state
[  913.637243][T21231] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.644410][T21231] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.711764][T21231] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.732080][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  913.741674][T10558] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.752580][T10558] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.771237][T21231] 8021q: adding VLAN 0 to HW filter on device team0
[  913.787885][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  913.797139][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.804286][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.827418][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  913.836525][T20448] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.843672][T20448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  913.866977][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  913.876909][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  913.895306][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  913.904225][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  913.912858][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  913.925075][T21231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  913.949747][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  913.957928][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  913.975343][T21231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.213909][T21242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  914.270965][T21242] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  914.295497][T21242] device gretap0 entered promiscuous mode
01:39:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:40 executing program 5:

01:39:40 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:40 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:40 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:40 executing program 5:

[  914.473238][T21259] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:40 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="97", 0x1, 0xfffffffffffffffb)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:40 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)

01:39:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:40 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
request_key(0x0, 0x0, &(0x7f0000000680)='-securitboxnet1\x00)G-l\xafrI\xa1#\x8d\x02RJ\xf9\xa6\xbei~aI\xc9\xdd\x7f\xa4\xd3W\x93\'\xd2\xdb\xec\xa8:\x90I\xe72\xfa\xf4\\\xa0\xd8\xac\x167*!`\xd9gw\xd0\xed\x03\x8d~\x1c;\xb0\xa8\xae\x15\xb8\xa7,\xdeDK\xd6L\x98\x01r\v\xe5\x99,,\xe6\xd9\x1f9\v\x98\xf0K\xffW\xa2\xfd\x8c\x90\x1d\"\xf7\xa39S\x8fu\xcc\xceV\x8d\vd\xe7\xf3\x0f\v\xec/\x02\x8c\xb0i\xc63&\x98\xe0\xb4', r0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  914.972347][   T26] audit: type=1804 audit(1575337180.728:440): pid=21258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/511/memory.events" dev="sda1" ino=16592 res=1
[  915.089059][   T26] audit: type=1800 audit(1575337180.728:441): pid=21258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16592 res=0
01:39:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:41 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140))
ioctl$EVIOCREVOKE(r0, 0x40044590, 0x0)

01:39:41 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0x9, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:41 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
keyctl$clear(0x7, r0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:41 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  915.754306][T21298] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:41 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0x9, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:41 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0x9, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:42 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140))
ioctl$EVIOCREVOKE(r0, 0x40044590, 0x0)

01:39:42 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0x71, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9240, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:42 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  916.572079][   T26] audit: type=1800 audit(1575337182.328:442): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16607 res=0
01:39:42 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:42 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:42 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:42 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140))
ioctl$EVIOCREVOKE(r0, 0x40044590, 0x0)

[  916.784374][T21338] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:42 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  917.610420][   T26] audit: type=1804 audit(1575337183.368:443): pid=21336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/513/memory.events" dev="sda1" ino=16587 res=1
[  917.656536][   T26] audit: type=1800 audit(1575337183.398:444): pid=21336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16587 res=0
[  918.729884][T21358] IPVS: ftp: loaded support on port[0] = 21
[  918.849183][T21358] chnl_net:caif_netlink_parms(): no params data found
[  918.891601][T21358] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.898872][T21358] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.907382][T21358] device bridge_slave_0 entered promiscuous mode
[  918.919841][T21358] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.927259][T21358] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.936175][T21358] device bridge_slave_1 entered promiscuous mode
[  918.970016][T21358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.981887][T21358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.018985][T21358] team0: Port device team_slave_0 added
[  919.028524][T21358] team0: Port device team_slave_1 added
[  919.096518][T21358] device hsr_slave_0 entered promiscuous mode
[  919.152849][T21358] device hsr_slave_1 entered promiscuous mode
[  919.192255][T21358] debugfs: Directory 'hsr0' with parent '/' already present!
[  919.217562][T21358] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.225560][T21358] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.232981][T21358] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.240039][T21358] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.307166][T21358] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.320914][T19460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  919.331921][T19460] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.347272][T19460] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.358829][T19460] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  919.372993][T21358] 8021q: adding VLAN 0 to HW filter on device team0
[  919.395503][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  919.404284][T20439] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.411340][T20439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.443956][T19460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  919.453210][T19460] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.460290][T19460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  919.485276][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  919.494272][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  919.503485][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  919.515016][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  919.535631][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  919.554665][T21358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  919.582213][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  919.589792][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  919.607534][T21358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  919.934607][T21368] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  920.020617][T21371] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  920.056276][T21371] device gretap0 entered promiscuous mode
01:39:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:45 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:45 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:45 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140))
ioctl$EVIOCREVOKE(r0, 0x40044590, 0x0)

01:39:45 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x0, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:46 executing program 4:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x4c9)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  920.235585][T21386] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:46 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:46 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:46 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}}, &(0x7f0000000100)='\a\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  920.872283][   T26] audit: type=1804 audit(1575337186.618:445): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/514/memory.events" dev="sda1" ino=16632 res=1
[  920.962106][   T26] audit: type=1800 audit(1575337186.628:446): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16632 res=0
01:39:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:47 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

01:39:47 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, 0x0, 0x0)

01:39:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:47 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:47 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x0, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:47 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')

[  921.466301][T21424] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:47 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/211)

01:39:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:47 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, 0x0)

01:39:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:47 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, 0x0)

01:39:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:47 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
r1 = getpid()
tkill(r1, 0x9)
setpgid(r1, 0x0)

01:39:47 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a')
syz_open_procfs$namespace(0x0, 0x0)

[  921.998793][   T26] audit: type=1804 audit(1575337187.758:447): pid=21429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/515/memory.events" dev="sda1" ino=16648 res=1
01:39:47 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  922.142100][   T26] audit: type=1800 audit(1575337187.758:448): pid=21429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16648 res=0
01:39:48 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x0, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:48 executing program 5:

01:39:48 executing program 4:

[  922.427771][   T26] audit: type=1804 audit(1575337188.188:449): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/516/memory.events" dev="sda1" ino=16652 res=1
[  922.578778][T21478] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  922.620364][   T26] audit: type=1800 audit(1575337188.188:450): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16652 res=0
[  924.084487][T21483] IPVS: ftp: loaded support on port[0] = 21
[  924.204386][T21483] chnl_net:caif_netlink_parms(): no params data found
[  924.258826][T21483] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.267267][T21483] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.276263][T21483] device bridge_slave_0 entered promiscuous mode
[  924.289900][T21483] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.297978][T21483] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.306406][T21483] device bridge_slave_1 entered promiscuous mode
[  924.341625][T21483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  924.354725][T21483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  924.394548][T21483] team0: Port device team_slave_0 added
[  924.401830][T21483] team0: Port device team_slave_1 added
[  924.471594][T21483] device hsr_slave_0 entered promiscuous mode
[  924.522733][T21483] device hsr_slave_1 entered promiscuous mode
[  924.562251][T21483] debugfs: Directory 'hsr0' with parent '/' already present!
[  924.599689][T21483] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.606917][T21483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  924.614374][T21483] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.621511][T21483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.688376][T21483] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.710698][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  924.722756][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.731297][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.745312][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  924.764766][T21483] 8021q: adding VLAN 0 to HW filter on device team0
[  924.780197][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  924.789709][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.796869][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.827810][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  924.837885][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.845061][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  924.855993][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  924.875179][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  924.884286][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  924.893175][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  924.911901][T21483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  924.935261][T21483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  924.952411][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  924.980706][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  924.988772][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  925.005782][T21483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  925.243004][T21493] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  925.306359][T21493] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  925.337489][T21493] device gretap0 entered promiscuous mode
01:39:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:51 executing program 4:

01:39:51 executing program 5:

01:39:51 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {0x0}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:51 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:51 executing program 4:

01:39:51 executing program 5:

[  925.493263][T21510] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  925.587124][T21516] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:39:51 executing program 4:

01:39:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {0x0}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:51 executing program 5:

01:39:51 executing program 4:

[  925.828303][T21511] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
01:39:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:51 executing program 5:

01:39:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {0x0}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  926.297764][   T26] audit: type=1800 audit(1575337192.058:451): pid=21509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16667 res=0
[  926.324634][T21546] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:39:52 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:52 executing program 4:

01:39:52 executing program 5:

01:39:52 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:52 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

[  926.468828][T21543] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
01:39:52 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

[  926.616154][T21560] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  926.711300][   T26] audit: type=1804 audit(1575337192.468:452): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/518/memory.events" dev="sda1" ino=16669 res=1
01:39:52 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  926.839690][   T26] audit: type=1800 audit(1575337192.468:453): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16669 res=0
01:39:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:52 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

[  926.985963][T21592] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:39:52 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

[  927.120362][T21586] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
01:39:53 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:53 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0xa, 0x1d, 0x400, 0xc}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x1b)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/194}, 0x20)

01:39:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {0x0}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:53 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

[  927.609851][T21625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:39:53 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

01:39:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {0x0}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  927.747421][T21626] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  927.915330][   T26] audit: type=1800 audit(1575337193.678:454): pid=21585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16682 res=0
01:39:53 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {0x0}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  928.080353][T21646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  928.272542][T21650] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
01:39:54 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

01:39:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:54 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0))
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "80000d", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

[  928.626191][T21671] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:39:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:54 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

[  929.088960][   T26] audit: type=1804 audit(1575337194.848:455): pid=21660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/520/memory.events" dev="sda1" ino=16686 res=1
01:39:54 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  929.272147][   T26] audit: type=1800 audit(1575337194.848:456): pid=21660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16686 res=0
01:39:55 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:39:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:55 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0))
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  929.490384][   T26] audit: type=1804 audit(1575337195.248:457): pid=21695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/521/memory.events" dev="sda1" ino=16681 res=1
01:39:55 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  929.615081][   T26] audit: type=1800 audit(1575337195.278:458): pid=21695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16681 res=0
01:39:55 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:39:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc], 0x100000})
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000180)={0x0, "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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:39:55 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {0x0}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  930.063515][T21706] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  930.167033][T21720] kvm [21715]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f
01:39:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:39:56 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:39:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {0x0}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:56 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0))
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:56 executing program 5:
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:39:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc], 0x100000})
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000180)={0x0, "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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:39:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {0x0}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  930.634386][T21742] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  930.704275][   T26] audit: type=1800 audit(1575337196.468:459): pid=21708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16519 res=0
01:39:56 executing program 5:
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:39:56 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:56 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:56 executing program 5:
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:39:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc], 0x100000})
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000180)={0x0, "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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  931.062963][   T26] audit: type=1804 audit(1575337196.828:460): pid=21754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/523/memory.events" dev="sda1" ino=16672 res=1
01:39:56 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:39:57 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:39:57 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0b")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:39:57 executing program 5:
r0 = syz_open_dev$tty(0x0, 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

[  931.448753][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  931.448768][   T26] audit: type=1804 audit(1575337197.208:462): pid=21772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/524/memory.events" dev="sda1" ino=16696 res=1
01:39:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc], 0x100000})
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000180)={0x0, "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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:39:57 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  931.645583][T21788] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  931.662105][   T26] audit: type=1800 audit(1575337197.208:463): pid=21772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16696 res=0
[  932.122496][   T26] audit: type=1804 audit(1575337197.878:464): pid=21799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/525/memory.events" dev="sda1" ino=16676 res=1
[  932.184111][   T26] audit: type=1800 audit(1575337197.878:465): pid=21799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16676 res=0
[  933.676076][T21805] IPVS: ftp: loaded support on port[0] = 21
[  933.791601][T21805] chnl_net:caif_netlink_parms(): no params data found
[  933.838309][T21805] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.845534][T21805] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.854466][T21805] device bridge_slave_0 entered promiscuous mode
[  933.863335][T21805] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.870499][T21805] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.879363][T21805] device bridge_slave_1 entered promiscuous mode
[  933.910769][T21805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.923634][T21805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.956068][T21805] team0: Port device team_slave_0 added
[  933.965899][T21805] team0: Port device team_slave_1 added
[  934.040828][T21805] device hsr_slave_0 entered promiscuous mode
[  934.092731][T21805] device hsr_slave_1 entered promiscuous mode
[  934.152241][T21805] debugfs: Directory 'hsr0' with parent '/' already present!
[  934.181453][T21805] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.188959][T21805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.196390][T21805] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.203577][T21805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  934.261023][T21805] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.280963][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  934.291922][T20439] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.302608][T20439] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.313557][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  934.332538][T21805] 8021q: adding VLAN 0 to HW filter on device team0
[  934.358267][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  934.366941][T20448] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.374078][T20448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  934.384101][T20448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  934.392921][T20448] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.399972][T20448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.426167][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  934.435868][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  934.450528][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  934.477290][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  934.487065][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  934.499294][T21805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  934.523010][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  934.530647][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  934.545984][T21805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  934.834654][T21814] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  934.898288][T21814] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  934.925724][T21814] device gretap0 entered promiscuous mode
01:40:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:00 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:00 executing program 5:
r0 = syz_open_dev$tty(0x0, 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:40:00 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef092744394016bc55c8e077ad8611f01b14b9b", 0x15}], 0x1)

01:40:00 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:00 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0b")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:00 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000})
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

01:40:00 executing program 5:
r0 = syz_open_dev$tty(0x0, 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

[  935.128459][T21832] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:40:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {0x0}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:01 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

[  935.410584][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0x4d00000000f
01:40:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {0x0}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  935.453386][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f
[  935.488188][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f
01:40:01 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

[  935.529867][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000041 data 0x4d00000000f
[  935.570427][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0x4d00000000f
[  935.619032][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0x4d00000000f
[  935.652420][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000047 data 0x4d00000000f
[  935.668958][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000015 data 0x4d00000000f
[  935.709567][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007f data 0x4d00000000f
[  935.719589][   T26] audit: type=1804 audit(1575337201.468:466): pid=21831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/526/memory.events" dev="sda1" ino=16707 res=1
[  935.753498][T21841] kvm [21835]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004d data 0x4d00000000f
[  935.862114][   T26] audit: type=1800 audit(1575337201.508:467): pid=21831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16707 res=0
01:40:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:02 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:40:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {0x0}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:02 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:02 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0b")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:02 executing program 4:
dup(0xffffffffffffffff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280))
dup(0xffffffffffffffff)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7b, 0x0, &(0x7f00000002c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))

01:40:02 executing program 5:
syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

[  936.392500][T21882] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:40:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:02 executing program 5:
syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:40:02 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:02 executing program 5:
syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:40:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:02 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:02 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, 0x0, 0x0)

[  937.071091][   T26] audit: type=1804 audit(1575337202.828:468): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/527/memory.events" dev="sda1" ino=16735 res=1
[  937.211218][   T26] audit: type=1800 audit(1575337202.828:469): pid=21883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16735 res=0
01:40:03 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:03 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe847")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:03 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:03 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  937.428483][T21932] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  937.514265][   T26] audit: type=1804 audit(1575337203.278:470): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/528/memory.events" dev="sda1" ino=16700 res=1
[  937.604813][   T26] audit: type=1800 audit(1575337203.278:471): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16700 res=0
[  939.026378][T21941] IPVS: ftp: loaded support on port[0] = 21
[  939.130152][T21941] chnl_net:caif_netlink_parms(): no params data found
[  939.179130][T21941] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.186793][T21941] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.198333][T21941] device bridge_slave_0 entered promiscuous mode
[  939.208525][T21941] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.216314][T21941] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.224931][T21941] device bridge_slave_1 entered promiscuous mode
[  939.254008][T21941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  939.266425][T21941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  939.299270][T21941] team0: Port device team_slave_0 added
[  939.307769][T21941] team0: Port device team_slave_1 added
[  939.384729][T21941] device hsr_slave_0 entered promiscuous mode
[  939.422641][T21941] device hsr_slave_1 entered promiscuous mode
[  939.462344][T21941] debugfs: Directory 'hsr0' with parent '/' already present!
[  939.487736][T21941] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.494885][T21941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.502286][T21941] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.509369][T21941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.574102][T21941] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.591949][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  939.604033][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.613374][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.625302][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  939.643375][T21941] 8021q: adding VLAN 0 to HW filter on device team0
[  939.657723][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  939.667214][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.674347][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.694316][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  939.703235][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.710279][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.736426][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  939.747300][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  939.767945][T21941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  939.778803][T21941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  939.791440][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  939.800155][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  939.809051][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  939.833678][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  939.841216][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  939.849347][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  939.864252][T21941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  940.135196][T21951] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:40:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  940.200754][T21951] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  940.235583][T21951] device gretap0 entered promiscuous mode
01:40:06 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:06 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, 0x0, 0x0)

01:40:06 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe847")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:06 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:06 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {0x0}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:06 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:06 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, 0x0, 0x0)

[  940.383155][T21968] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:40:06 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {0x0}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:06 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0), 0x0)

01:40:06 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:06 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0), 0x0)

[  940.895284][   T26] audit: type=1804 audit(1575337206.658:472): pid=21967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/529/memory.events" dev="sda1" ino=16771 res=1
[  940.994145][   T26] audit: type=1800 audit(1575337206.658:473): pid=21967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16771 res=0
01:40:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {0x0}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:07 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:07 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:07 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0), 0x0)

01:40:07 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe847")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:07 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  941.579756][T22008] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:40:07 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

01:40:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:07 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

01:40:07 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:07 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:07 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

[  942.371366][   T26] audit: type=1800 audit(1575337208.128:474): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16787 res=0
01:40:08 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:08 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:08 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:08 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe84740")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  942.609308][T22052] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  942.784399][   T26] audit: type=1804 audit(1575337208.548:475): pid=22059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/531/memory.events" dev="sda1" ino=16772 res=1
[  942.840849][   T26] audit: type=1800 audit(1575337208.548:476): pid=22059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16772 res=0
[  944.255574][T22064] IPVS: ftp: loaded support on port[0] = 21
[  944.374561][T22064] chnl_net:caif_netlink_parms(): no params data found
[  944.420857][T22064] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.431775][T22064] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.440673][T22064] device bridge_slave_0 entered promiscuous mode
[  944.450507][T22064] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.464723][T22064] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.476895][T22064] device bridge_slave_1 entered promiscuous mode
[  944.504984][T22064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  944.523079][T22064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  944.556063][T22064] team0: Port device team_slave_0 added
[  944.566386][T22064] team0: Port device team_slave_1 added
[  944.626310][T22064] device hsr_slave_0 entered promiscuous mode
[  944.682823][T22064] device hsr_slave_1 entered promiscuous mode
[  944.713253][T22064] debugfs: Directory 'hsr0' with parent '/' already present!
[  944.737336][T22064] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.744477][T22064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  944.751782][T22064] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.759007][T22064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  944.827794][T22064] 8021q: adding VLAN 0 to HW filter on device bond0
[  944.846818][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  944.859534][T10558] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.868510][T10558] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.878371][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  944.897222][T22064] 8021q: adding VLAN 0 to HW filter on device team0
[  944.925056][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  944.934108][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.941149][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  944.951738][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  944.960263][T10558] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.967456][T10558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  944.987710][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  944.997498][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  945.029055][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  945.053735][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  945.068977][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  945.080556][T22064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  945.113136][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  945.120721][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  945.138558][T22064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  945.373462][T22073] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  945.444837][T22073] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  945.465717][T22073] device gretap0 entered promiscuous mode
01:40:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:11 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:11 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:11 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {0x0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:11 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:11 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe84740")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:11 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:11 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  945.652379][T22090] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
01:40:11 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {0x0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  945.725053][   T26] audit: type=1804 audit(1575337211.488:477): pid=22085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/532/memory.events" dev="sda1" ino=16609 res=1
01:40:11 executing program 5:
r0 = fsopen(&(0x7f0000000100)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

01:40:11 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  945.862227][   T26] audit: type=1800 audit(1575337211.488:478): pid=22085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16609 res=0
01:40:11 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  946.433232][   T26] audit: type=1804 audit(1575337212.188:479): pid=22107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/533/memory.events" dev="sda1" ino=16799 res=1
[  946.522104][   T26] audit: type=1800 audit(1575337212.198:480): pid=22107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16799 res=0
01:40:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {0x0}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:12 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x416200, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00')
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x6fffe, 0x8}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="f175bb286482dbec97df245f0f278c66e74328eee9116543971f5dd8c6454e43ca08c2bada1722efdef51136ee0f6361eeeb3c832116fe0cb646b175ae3544908b64c601e8a2010f1e96a455753572199d02a3a15af450b11e09636bb3bec8b74fab336f72152b77ee85b943", 0x6c)

01:40:12 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe84740")
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

01:40:12 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  946.916526][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  946.938993][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  946.970096][T22134] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  946.999403][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  947.035472][   T26] audit: type=1804 audit(1575337212.798:481): pid=22125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/534/memory.events" dev="sda1" ino=16812 res=1
01:40:12 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:12 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  947.086580][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  947.158320][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  947.179260][   T26] audit: type=1800 audit(1575337212.798:482): pid=22125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16812 res=0
[  947.195870][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:13 executing program 4:
r0 = syz_open_dev$tty(0x0, 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  947.253875][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:13 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  947.297481][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  947.384196][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:13 executing program 4:
r0 = syz_open_dev$tty(0x0, 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:13 executing program 4:
r0 = syz_open_dev$tty(0x0, 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:13 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x416200, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00')
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x6fffe, 0x8}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="f175bb286482dbec97df245f0f278c66e74328eee9116543971f5dd8c6454e43ca08c2bada1722efdef51136ee0f6361eeeb3c832116fe0cb646b175ae3544908b64c601e8a2010f1e96a455753572199d02a3a15af450b11e09636bb3bec8b74fab336f72152b77ee85b943", 0x6c)

01:40:13 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0)

01:40:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:13 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:13 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  948.066353][   T26] audit: type=1804 audit(1575337213.828:483): pid=22148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/535/memory.events" dev="sda1" ino=16813 res=1
01:40:13 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:13 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  948.181340][   T26] audit: type=1800 audit(1575337213.838:484): pid=22148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16813 res=0
01:40:14 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  948.880430][   T26] audit: type=1804 audit(1575337214.638:485): pid=22194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/536/memory.events" dev="sda1" ino=16577 res=1
[  948.938006][   T26] audit: type=1800 audit(1575337214.638:486): pid=22194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16577 res=0
[  950.047390][T22204] IPVS: ftp: loaded support on port[0] = 21
[  950.168102][T22204] chnl_net:caif_netlink_parms(): no params data found
[  950.218525][T22204] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.226870][T22204] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.235830][T22204] device bridge_slave_0 entered promiscuous mode
[  950.246089][T22204] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.253968][T22204] bridge0: port 2(bridge_slave_1) entered disabled state
[  950.262586][T22204] device bridge_slave_1 entered promiscuous mode
[  950.290695][T22204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  950.306948][T22204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  950.343319][T22204] team0: Port device team_slave_0 added
[  950.350858][T22204] team0: Port device team_slave_1 added
[  950.416223][T22204] device hsr_slave_0 entered promiscuous mode
[  950.462672][T22204] device hsr_slave_1 entered promiscuous mode
[  950.502169][T22204] debugfs: Directory 'hsr0' with parent '/' already present!
[  950.528418][T22204] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.535583][T22204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.542995][T22204] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.550083][T22204] bridge0: port 1(bridge_slave_0) entered forwarding state
[  950.621169][T22204] 8021q: adding VLAN 0 to HW filter on device bond0
[  950.639457][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  950.654454][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.663599][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  950.675156][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  950.693067][T22204] 8021q: adding VLAN 0 to HW filter on device team0
[  950.717593][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  950.726965][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.734117][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  950.753419][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  950.762055][T20439] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.769144][T20439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.795673][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  950.822918][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  950.831356][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  950.840585][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  950.856458][T22204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  950.868233][T22204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  950.877446][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  950.911464][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  950.919356][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  950.940172][T22204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  951.183961][T22214] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  951.252464][T22217] __nla_validate_parse: 41 callbacks suppressed
[  951.252500][T22217] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  951.293495][T22217] device gretap0 entered promiscuous mode
01:40:17 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:17 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:17 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0)

01:40:17 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x416200, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00')
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x6fffe, 0x8}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="f175bb286482dbec97df245f0f278c66e74328eee9116543971f5dd8c6454e43ca08c2bada1722efdef51136ee0f6361eeeb3c832116fe0cb646b175ae3544908b64c601e8a2010f1e96a455753572199d02a3a15af450b11e09636bb3bec8b74fab336f72152b77ee85b943", 0x6c)

01:40:17 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:17 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  951.428652][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  951.468516][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:17 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:17 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:17 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:17 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  951.922693][   T26] audit: type=1804 audit(1575337217.678:487): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/537/memory.events" dev="sda1" ino=16837 res=1
[  952.020327][   T26] audit: type=1800 audit(1575337217.678:488): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16837 res=0
[  952.306559][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  952.323145][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  952.336972][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  952.347511][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  952.357746][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  952.373826][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  952.384115][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:18 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:18 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:18 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:18 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:18 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0)

01:40:18 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x416200, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00')
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x6fffe, 0x8}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="f175bb286482dbec97df245f0f278c66e74328eee9116543971f5dd8c6454e43ca08c2bada1722efdef51136ee0f6361eeeb3c832116fe0cb646b175ae3544908b64c601e8a2010f1e96a455753572199d02a3a15af450b11e09636bb3bec8b74fab336f72152b77ee85b943", 0x6c)

01:40:18 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:18 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:18 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:18 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:18 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  953.058284][   T26] audit: type=1804 audit(1575337218.788:489): pid=22272 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/538/memory.events" dev="sda1" ino=16832 res=1
01:40:18 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {0x0}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  953.142758][   T26] audit: type=1800 audit(1575337218.818:490): pid=22272 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16832 res=0
01:40:18 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:19 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:19 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {0x0}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:19 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

01:40:19 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:19 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x416200, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00')
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x6fffe, 0x8}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="f175bb286482dbec97df245f0f278c66e74328eee9116543971f5dd8c6454e43ca08c2bada1722efdef51136ee0f6361eeeb3c832116fe0cb646b175ae3544908b64c601e8a2010f1e96a455753572199d02a3a15af450b11e09636bb3bec8b74fab336f72152b77ee85b943", 0x6c)

01:40:19 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {0x0}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:19 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  954.004533][   T26] audit: type=1804 audit(1575337219.768:491): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/539/memory.events" dev="sda1" ino=16819 res=1
[  954.094732][   T26] audit: type=1800 audit(1575337219.798:492): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16819 res=0
[  955.476505][T22333] IPVS: ftp: loaded support on port[0] = 21
[  955.597041][T22333] chnl_net:caif_netlink_parms(): no params data found
[  955.639261][T22333] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.646499][T22333] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.655118][T22333] device bridge_slave_0 entered promiscuous mode
[  955.664318][T22333] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.671478][T22333] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.679824][T22333] device bridge_slave_1 entered promiscuous mode
[  955.712137][T22333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  955.726160][T22333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  955.757043][T22333] team0: Port device team_slave_0 added
[  955.764947][T22333] team0: Port device team_slave_1 added
[  955.846318][T22333] device hsr_slave_0 entered promiscuous mode
[  955.908236][T22333] device hsr_slave_1 entered promiscuous mode
[  955.962128][T22333] debugfs: Directory 'hsr0' with parent '/' already present!
[  955.987593][T22333] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.994759][T22333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.002192][T22333] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.009341][T22333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  956.084075][T22333] 8021q: adding VLAN 0 to HW filter on device bond0
[  956.101593][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  956.112236][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.121155][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.131152][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  956.149125][T22333] 8021q: adding VLAN 0 to HW filter on device team0
[  956.165384][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  956.174519][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.181584][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  956.205667][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  956.214787][T10558] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.221865][T10558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.258010][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  956.274018][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  956.283815][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  956.293444][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  956.307314][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  956.319148][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  956.355762][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  956.363711][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  956.388876][T22333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  956.725968][T22344] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  956.812502][T22347] __nla_validate_parse: 63 callbacks suppressed
[  956.812513][T22347] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  956.833749][T22347] device gretap0 entered promiscuous mode
01:40:22 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:22 executing program 4:
syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:22 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:22 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

01:40:22 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)

01:40:22 executing program 4:
syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:23 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
gettid()
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x416200, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x10000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)})
vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x3, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00')
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x0, 0x8}, 0x14)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="f175bb286482dbec97df245f0f278c66e74328eee9116543971f5dd8c6454e43ca08c2bada1722efdef51136ee0f6361eeeb3c832116fe0cb646b175ae3544908b64c601e8a2010f1e96a455753572199d02a3a15af450b11e09636bb3bec8b74fab336f72152b77ee85b943", 0x6c)

01:40:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  957.420757][T22375] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:23 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:23 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  957.665027][   T26] audit: type=1804 audit(1575337223.428:493): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/540/memory.events" dev="sda1" ino=16876 res=1
[  957.830162][   T26] audit: type=1800 audit(1575337223.428:494): pid=22360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16876 res=0
[  958.090960][T22375] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.123188][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.158466][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.202684][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.285788][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.316246][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
01:40:24 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:24 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0)

01:40:24 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:24 executing program 4:
syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

[  958.333461][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.353729][T22378] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  958.424601][   T26] audit: type=1804 audit(1575337224.188:495): pid=22391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/541/memory.events" dev="sda1" ino=16867 res=1
01:40:24 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, 0x0, 0x0)

01:40:24 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  958.523234][   T26] audit: type=1800 audit(1575337224.188:496): pid=22391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16867 res=0
01:40:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r2, &(0x7f0000000a00)='1', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0))

01:40:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:24 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:24 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, 0x0, 0x0)

01:40:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x40)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x0, 0x0})

01:40:24 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:24 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, 0x0, 0x0)

01:40:25 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

01:40:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x79, 0x4)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x123}], 0x1000000000000158)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

01:40:25 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0), 0x0)

01:40:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  959.512098][   T26] audit: type=1800 audit(1575337225.258:497): pid=22412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16857 res=0
01:40:25 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0), 0x0)

01:40:25 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  959.896164][   T26] audit: type=1804 audit(1575337225.658:498): pid=22459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/543/memory.events" dev="sda1" ino=16872 res=1
[  959.986578][   T26] audit: type=1800 audit(1575337225.688:499): pid=22459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16872 res=0
[  961.455739][T22470] IPVS: ftp: loaded support on port[0] = 21
[  961.647403][T22470] chnl_net:caif_netlink_parms(): no params data found
[  961.743739][T22470] bridge0: port 1(bridge_slave_0) entered blocking state
[  961.750945][T22470] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.773637][T22470] device bridge_slave_0 entered promiscuous mode
[  961.782850][T22470] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.790014][T22470] bridge0: port 2(bridge_slave_1) entered disabled state
[  961.814312][T22470] device bridge_slave_1 entered promiscuous mode
[  961.864744][T22470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  961.895734][T22470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  961.963058][T22470] team0: Port device team_slave_0 added
[  961.979206][T22470] team0: Port device team_slave_1 added
[  962.076055][T22470] device hsr_slave_0 entered promiscuous mode
[  962.142772][T22470] device hsr_slave_1 entered promiscuous mode
[  962.182118][T22470] debugfs: Directory 'hsr0' with parent '/' already present!
[  962.232544][T22470] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.239718][T22470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.247153][T22470] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.254342][T22470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.323583][T22470] 8021q: adding VLAN 0 to HW filter on device bond0
[  962.341920][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  962.353088][T19328] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.361861][T19328] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.372561][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  962.391159][T22470] 8021q: adding VLAN 0 to HW filter on device team0
[  962.405779][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  962.415277][T19328] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.422422][T19328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.455761][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  962.464953][ T9094] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.472149][ T9094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.481209][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  962.504884][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  962.513833][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  962.523181][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  962.539808][T22470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  962.557993][T22470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  962.574410][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  962.622484][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  962.630084][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  962.659868][T22470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  962.932196][  T173] tipc: TX() has been purged, node left!
[  962.943420][  T173] tipc: TX() has been purged, node left!
[  962.973576][T22484] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  963.042367][T22487] __nla_validate_parse: 19 callbacks suppressed
[  963.042380][T22487] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  963.063886][T22487] device gretap0 entered promiscuous mode
01:40:28 executing program 5:
poll(&(0x7f0000000040)=[{}, {}], 0x2, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x2}, 0x10)
recvfrom$inet(r0, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521)
shutdown(r0, 0x0)

01:40:28 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x9, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:28 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0), 0x0)

01:40:28 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:28 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

01:40:29 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

01:40:29 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  963.307046][  T173] tipc: TX() has been purged, node left!
[  963.421362][  T173] tipc: TX() has been purged, node left!
[  963.429704][  T173] tipc: TX() has been purged, node left!
[  963.452887][  T173] tipc: TX() has been purged, node left!
[  963.472915][  T173] tipc: TX() has been purged, node left!
[  963.496545][  T173] tipc: TX() has been purged, node left!
01:40:29 executing program 5:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
poll(&(0x7f0000000040)=[{r0}, {}], 0x2, 0x4e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515)
setsockopt$sock_timeval(r1, 0xffff, 0x0, 0x0, 0x0)
recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521)
shutdown(r1, 0x0)

[  963.535020][  T173] tipc: TX() has been purged, node left!
[  963.548114][  T173] tipc: TX() has been purged, node left!
[  963.570690][  T173] tipc: TX() has been purged, node left!
[  963.600393][  T173] tipc: TX() has been purged, node left!
[  963.628994][  T173] tipc: TX() has been purged, node left!
01:40:29 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  963.755698][   T26] audit: type=1804 audit(1575337229.518:500): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/544/memory.events" dev="sda1" ino=16911 res=1
[  963.838944][   T26] audit: type=1800 audit(1575337229.548:501): pid=22502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16911 res=0
01:40:29 executing program 5:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x4e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515)
setsockopt$sock_timeval(r1, 0xffff, 0x0, 0x0, 0x0)
recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521)
shutdown(r1, 0x0)

01:40:29 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:29 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:29 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000000)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c08001600f0", 0x21)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1000000010, 0x80002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

01:40:29 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:29 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

[  964.587292][   T26] audit: type=1804 audit(1575337230.348:502): pid=22539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/545/memory.events" dev="sda1" ino=16900 res=1
[  964.643127][   T26] audit: type=1800 audit(1575337230.378:503): pid=22539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16900 res=0
01:40:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:33 executing program 5:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
poll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x4e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515)
setsockopt$sock_timeval(r1, 0xffff, 0x0, 0x0, 0x0)
recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521)
shutdown(r1, 0x0)

01:40:33 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:33 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x0, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:33 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f0000000740)="0805b5055e0bcfe8475071")
r1 = getpgrp(0xffffffffffffffff)
getpriority(0x1, r1)

01:40:33 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1)

01:40:33 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:33 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:33 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
poll(&(0x7f0000000000)=[{r0, 0x8100}], 0x1, 0x0)

01:40:33 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0)
setresuid(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0xae4a, &(0x7f00000004c0)={0x1})

[  967.972352][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  967.978961][    C1] protocol 88fb is buggy, dev hsr_slave_1
01:40:33 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:33 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0x9, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4042145e}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

01:40:34 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x0)

[  968.481809][T22617] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  968.591498][   T26] audit: type=1800 audit(1575337234.338:504): pid=22565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16903 res=0
01:40:34 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x0, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:34 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0x9, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:34 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
gettid()
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
umount2(0x0, 0x0)
mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4c000000, &(0x7f0000000200)={'trans=tcp,', {'port'}})
getgid()
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
setregid(r2, r1)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x101000, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
socket$netlink(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@dev}, &(0x7f0000000340)=0x14)
inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3)
socket(0x11, 0x800000003, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @empty, @remote}, &(0x7f0000001b40)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = inotify_init1(0x0)
dup2(0xffffffffffffffff, r3)

01:40:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4042145e}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

01:40:34 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50e", 0x2}], 0x1)

[  968.900767][T22639] fuse: Bad value for 'fd'
01:40:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0x9, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  968.965039][T22644] fuse: Bad value for 'fd'
[  969.029853][T22647] fuse: Bad value for 'fd'
01:40:34 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1)

01:40:34 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x81, 0xaaaaaaaaaaaac55, &(0x7f0000000080), 0x0, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8020000)
semget$private(0x0, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r1 = msgget$private(0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/5)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300))
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0xc8f1, 0x1})
setns(r0, 0x0)

[  969.105985][T22635] 9pnet: p9_fd_create_tcp (22635): problem connecting socket to 127.0.0.1
[  969.446329][T22644] 9pnet: p9_fd_create_tcp (22644): problem connecting socket to 127.0.0.1
[  969.524184][   T26] audit: type=1804 audit(1575337235.288:505): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/547/memory.events" dev="sda1" ino=16928 res=1
[  969.553407][T22639] fuse: Bad value for 'fd'
[  969.624010][T22639] fuse: Bad value for 'fd'
[  969.639419][   T26] audit: type=1800 audit(1575337235.308:506): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16928 res=0
[  969.645248][T22635] fuse: Bad value for 'fd'
[  971.139150][T22677] IPVS: ftp: loaded support on port[0] = 21
[  971.250045][T22677] chnl_net:caif_netlink_parms(): no params data found
[  971.298784][T22677] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.307462][T22677] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.316143][T22677] device bridge_slave_0 entered promiscuous mode
[  971.325326][T22677] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.332573][T22677] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.341157][T22677] device bridge_slave_1 entered promiscuous mode
[  971.375469][T22677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  971.387839][T22677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  971.435341][T22677] team0: Port device team_slave_0 added
[  971.448399][T22677] team0: Port device team_slave_1 added
[  971.516299][T22677] device hsr_slave_0 entered promiscuous mode
[  971.562863][T22677] device hsr_slave_1 entered promiscuous mode
[  971.602172][T22677] debugfs: Directory 'hsr0' with parent '/' already present!
[  971.631056][T22677] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.638228][T22677] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.645896][T22677] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.653047][T22677] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.732504][T22677] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.758781][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  971.770074][T19328] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.780936][T19328] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.793712][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  971.811718][T22677] 8021q: adding VLAN 0 to HW filter on device team0
[  971.846082][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  971.855202][T19328] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.862375][T19328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.870903][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  971.880599][T19328] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.887897][T19328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.914741][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  971.924824][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  971.943363][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  971.951614][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  971.961208][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  971.975960][T22677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  972.007346][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  972.019388][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  972.034607][T22677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  973.557059][T22687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  973.582550][T22690] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  973.603377][T22690] device gretap0 entered promiscuous mode
01:40:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:39 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:39 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

01:40:39 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
gettid()
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
umount2(0x0, 0x0)
mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4c000000, &(0x7f0000000200)={'trans=tcp,', {'port'}})
getgid()
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
setregid(r2, r1)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x101000, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
socket$netlink(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@dev}, &(0x7f0000000340)=0x14)
inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3)
socket(0x11, 0x800000003, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @empty, @remote}, &(0x7f0000001b40)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = inotify_init1(0x0)
dup2(0xffffffffffffffff, r3)

01:40:39 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x0, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:39 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x81, 0xaaaaaaaaaaaac55, &(0x7f0000000080), 0x0, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8020000)
semget$private(0x0, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r1 = msgget$private(0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/5)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300))
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0xc8f1, 0x1})
setns(r0, 0x0)

01:40:39 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

[  973.826679][T22709] fuse: Bad value for 'fd'
01:40:39 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:39 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000001c0)=[{}], 0x1)

[  973.953776][T22709] fuse: Bad value for 'fd'
[  974.034762][T22711] fuse: Bad value for 'fd'
[  974.111037][T22700] 9pnet: p9_fd_create_tcp (22700): problem connecting socket to 127.0.0.1
01:40:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  974.457261][   T26] audit: type=1804 audit(1575337240.218:507): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/548/memory.events" dev="sda1" ino=16785 res=1
01:40:40 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x0, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, 0x0, 0x0, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  974.550414][   T26] audit: type=1800 audit(1575337240.218:508): pid=22705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16785 res=0
01:40:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:40 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, 0x0, 0x0, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:40 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0xff5c}], 0x3e6, 0x0)

01:40:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
read(r0, &(0x7f00000001c0)=""/199, 0xc7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x477c, 0x0, 0x0, 0x800e00519)
shutdown(r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x2f7, 0x0, 0x0, 0x800e006f5)
shutdown(r1, 0x0)

01:40:40 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
gettid()
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
umount2(0x0, 0x0)
mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4c000000, &(0x7f0000000200)={'trans=tcp,', {'port'}})
getgid()
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
read$FUSE(0xffffffffffffffff, &(0x7f00000040c0), 0x14ec)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
setregid(r2, r1)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x101000, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
socket$netlink(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@dev}, &(0x7f0000000340)=0x14)
inotify_init1(0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3)
socket(0x11, 0x800000003, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @empty, @remote}, &(0x7f0000001b40)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = inotify_init1(0x0)
dup2(0xffffffffffffffff, r3)

[  975.157613][   T26] audit: type=1804 audit(1575337240.918:509): pid=22738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/549/memory.events" dev="sda1" ino=16785 res=1
01:40:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, 0x0, 0x0, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  975.261945][   T26] audit: type=1800 audit(1575337240.958:510): pid=22738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16785 res=0
[  975.338455][T22757] fuse: Bad value for 'fd'
01:40:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:41 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x0, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  975.398254][T22753] 9pnet: p9_fd_create_tcp (22753): problem connecting socket to 127.0.0.1
01:40:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
read(r0, &(0x7f00000001c0)=""/199, 0xc7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x477c, 0x0, 0x0, 0x800e00519)
shutdown(r0, 0x0)
recvfrom$inet(r1, 0x0, 0xc3cb, 0x0, 0x0, 0x800e0050e)
shutdown(r1, 0x0)

[  975.460702][T22757] fuse: Bad value for 'fd'
[  975.615930][T22753] fuse: Bad value for 'fd'
01:40:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xfffffffffffffffe, 0xfffffffffffffdd6)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00330)

01:40:41 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xfffffffffffffffe, 0xfffffffffffffdd6)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00330)

01:40:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:41 executing program 4:

01:40:41 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:41 executing program 4:

[  976.233967][   T26] audit: type=1804 audit(1575337241.998:511): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/550/memory.events" dev="sda1" ino=16785 res=1
01:40:42 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x0, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

[  976.334987][   T26] audit: type=1800 audit(1575337241.998:512): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16785 res=0
01:40:42 executing program 4:

[  977.009955][   T26] audit: type=1804 audit(1575337242.768:513): pid=22804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/551/memory.events" dev="sda1" ino=16690 res=1
[  977.103377][   T26] audit: type=1800 audit(1575337242.768:514): pid=22804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16690 res=0
[  978.495214][T22818] IPVS: ftp: loaded support on port[0] = 21
[  978.621906][T22818] chnl_net:caif_netlink_parms(): no params data found
[  978.671036][T22818] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.678965][T22818] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.687635][T22818] device bridge_slave_0 entered promiscuous mode
[  978.698022][T22818] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.705463][T22818] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.714500][T22818] device bridge_slave_1 entered promiscuous mode
[  978.741863][T22818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.755473][T22818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.791941][T22818] team0: Port device team_slave_0 added
[  978.800166][T22818] team0: Port device team_slave_1 added
[  978.876075][T22818] device hsr_slave_0 entered promiscuous mode
[  978.932949][T22818] device hsr_slave_1 entered promiscuous mode
[  978.972715][T22818] debugfs: Directory 'hsr0' with parent '/' already present!
[  978.996132][T22818] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.003573][T22818] bridge0: port 2(bridge_slave_1) entered forwarding state
[  979.011714][T22818] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.019183][T22818] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.095015][T22818] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.116065][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  979.125355][ T3044] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.135014][ T3044] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.146319][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  979.163509][T22818] 8021q: adding VLAN 0 to HW filter on device team0
[  979.188622][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  979.202824][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.210043][ T9095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.238746][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  979.249314][T19328] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.256619][T19328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  979.286789][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  979.296530][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  979.305931][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  979.323642][T22818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  979.336390][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  979.346222][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  979.355236][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  979.382181][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  979.390024][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  979.406943][T22818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  979.665996][T22828] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  979.714650][T22831] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  979.746867][T22831] device gretap0 entered promiscuous mode
01:40:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {0x0}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:45 executing program 0:

01:40:45 executing program 4:

01:40:45 executing program 5:

01:40:45 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0x0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:45 executing program 5:

01:40:45 executing program 4:

01:40:45 executing program 0:

01:40:45 executing program 5:

01:40:45 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {0x0}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:45 executing program 4:

[  980.548243][   T26] audit: type=1804 audit(1575337246.308:515): pid=22842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/552/memory.events" dev="sda1" ino=16941 res=1
[  980.643181][   T26] audit: type=1800 audit(1575337246.308:516): pid=22842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16941 res=0
01:40:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:46 executing program 0:

01:40:46 executing program 5:
syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@link_local, @local, [{}], {@mpls_uc={0x8847, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}, @igmp={0x0, 0x0, 0x0, @remote}}}}}}, 0x0)

01:40:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {0x0}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:46 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:46 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0x0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:46 executing program 0:
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040))
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0$v', 0x420000015001})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2b)
wait4(0x0, 0x0, 0x0, 0x0)

01:40:46 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
open(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)

01:40:46 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:46 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[  981.157879][T22881] ptrace attach of "/root/syz-executor.0"[22879] was attempted by "/root/syz-executor.0"[22881]
01:40:47 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:47 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x20003300}], 0x2b4)

01:40:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:47 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

[  981.809891][   T26] audit: type=1804 audit(1575337247.568:517): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/553/memory.events" dev="sda1" ino=16960 res=1
01:40:47 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0x0, 0x3, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:47 executing program 4:
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

[  981.976096][   T26] audit: type=1800 audit(1575337247.568:518): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16960 res=0
01:40:47 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x1001000200000000, 0x0, 0xc00, 0x0, [0xff0f, 0x3800000]})
geteuid()
r1 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r2 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r3)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
socket(0x10, 0x2, 0x0)
setreuid(0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000080))
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setregid(r4, 0x0)
setresgid(0xffffffffffffffff, r4, 0x0)
syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)

01:40:47 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:47 executing program 4:
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:48 executing program 4:
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

[  982.965873][   T26] audit: type=1804 audit(1575337248.728:519): pid=22919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/554/memory.events" dev="sda1" ino=16954 res=1
[  983.112236][   T26] audit: type=1800 audit(1575337248.728:520): pid=22919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16954 res=0
[  984.358870][T22950] IPVS: ftp: loaded support on port[0] = 21
[  984.487391][T22950] chnl_net:caif_netlink_parms(): no params data found
[  984.536718][T22950] bridge0: port 1(bridge_slave_0) entered blocking state
[  984.544184][T22950] bridge0: port 1(bridge_slave_0) entered disabled state
[  984.553273][T22950] device bridge_slave_0 entered promiscuous mode
[  984.563481][T22950] bridge0: port 2(bridge_slave_1) entered blocking state
[  984.570648][T22950] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.579420][T22950] device bridge_slave_1 entered promiscuous mode
[  984.621917][T22950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  984.634887][T22950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  984.661924][T22950] team0: Port device team_slave_0 added
[  984.678960][T22950] team0: Port device team_slave_1 added
[  984.746310][T22950] device hsr_slave_0 entered promiscuous mode
[  984.792818][T22950] device hsr_slave_1 entered promiscuous mode
[  984.832220][T22950] debugfs: Directory 'hsr0' with parent '/' already present!
[  984.860324][T22950] bridge0: port 2(bridge_slave_1) entered blocking state
[  984.867544][T22950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  984.875060][T22950] bridge0: port 1(bridge_slave_0) entered blocking state
[  984.882175][T22950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  984.972419][T22950] 8021q: adding VLAN 0 to HW filter on device bond0
[  984.991381][T22472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  985.003167][T22472] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.015628][T22472] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.026186][T22472] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  985.044081][T22950] 8021q: adding VLAN 0 to HW filter on device team0
[  985.073843][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  985.083369][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  985.090468][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  985.118230][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  985.127459][T19328] bridge0: port 2(bridge_slave_1) entered blocking state
[  985.134595][T19328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  985.156030][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  985.173151][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  985.181611][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  985.201751][T22950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  985.213615][T22950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  985.229618][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  985.239142][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  985.264153][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  985.282186][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  985.289826][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  985.304450][T22950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  985.648953][T22963] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  985.765016][T22964] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  985.797736][T22964] device gretap0 entered promiscuous mode
01:40:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:51 executing program 4:
r0 = syz_open_dev$tty(0x0, 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:51 executing program 5:
setrlimit(0x7, &(0x7f0000a9cff8))
socket$packet(0x11, 0x0, 0x300)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)

01:40:51 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x0, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x79, 0x4)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x123}], 0x1000000000000158)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

01:40:51 executing program 4:
r0 = syz_open_dev$tty(0x0, 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:51 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r6, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)
poll(0x0, 0x0, 0x0)

01:40:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x79, 0x4)
writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x123}], 0x1000000000000158)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

01:40:52 executing program 4:
r0 = syz_open_dev$tty(0x0, 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:52 executing program 4:
syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

[  986.753901][   T26] audit: type=1800 audit(1575337252.518:521): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16990 res=0
01:40:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:52 executing program 4:
syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

01:40:52 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x0, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:52 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
r7 = open(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r7, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000056c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004080)={r8}, 0xc)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc)
poll(&(0x7f0000000080)=[{r2, 0x1}, {r3}, {r9, 0x140c}], 0x3, 0x0)

01:40:52 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r6, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)
poll(0x0, 0x0, 0x0)

01:40:53 executing program 4:
syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)={0x0, 0x0})

[  987.366677][   T26] audit: type=1804 audit(1575337253.128:522): pid=23022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/556/memory.events" dev="sda1" ino=16997 res=1
01:40:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:53 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x0, 0x101}, 0x0, 0x7, r6, 0xb)

01:40:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  987.516832][   T26] audit: type=1800 audit(1575337253.128:523): pid=23022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16997 res=0
01:40:53 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, 0x0)

01:40:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:53 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, 0x0)

01:40:54 executing program 4:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b45, 0x0)

01:40:54 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x1001000200000000, 0x0, 0xc00, 0x0, [0xff0f, 0x3800000]})
geteuid()
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setreuid(0x0, 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r3)
socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r4)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setreuid(0x0, r6)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setregid(r7, 0x0)
setresgid(0xffffffffffffffff, r7, 0x0)
getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xee01])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setregid(0x0, 0x0)
setresgid(0xffffffffffffffff, r8, 0x0)
syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)

01:40:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:54 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
r7 = open(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r7, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000056c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004080)={r8}, 0xc)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc)
poll(&(0x7f0000000080)=[{r2, 0x1}, {r3}, {r9, 0x140c}], 0x3, 0x0)

[  988.540083][   T26] audit: type=1804 audit(1575337254.298:524): pid=23047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/557/memory.events" dev="sda1" ino=16975 res=1
01:40:54 executing program 4:
syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local, @local, [], {@mpls_uc={0x8847, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}, @igmp={0x0, 0x0, 0x0, @remote}}}}}}, 0x0)

01:40:54 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3}, 0x0, 0x7, r6, 0xb)

[  988.728251][   T26] audit: type=1800 audit(1575337254.328:525): pid=23047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16975 res=0
[  988.779715][T23082] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
01:40:54 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {0x0}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:54 executing program 5:
readv(0xffffffffffffff9c, &(0x7f00000016c0)=[{&(0x7f0000002740)=""/4102, 0x1006}], 0x1)
mknod(&(0x7f0000000000)='./bus\x00', 0x8000, 0x86128)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x81, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="01011f497b1ffd8b"], 0x8)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="fa1204a49155ce1e00", 0x9}], 0x1, 0x0)
pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140), 0x8}], 0x28d, 0x0)

[  989.717037][   T26] audit: type=1804 audit(1575337255.478:526): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/558/memory.events" dev="sda1" ino=16970 res=1
[  989.810981][   T26] audit: type=1800 audit(1575337255.478:527): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16970 res=0
[  991.000416][T23110] IPVS: ftp: loaded support on port[0] = 21
[  991.125405][T23110] chnl_net:caif_netlink_parms(): no params data found
[  991.175038][T23110] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.182364][T23110] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.191339][T23110] device bridge_slave_0 entered promiscuous mode
[  991.200495][T23110] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.208315][T23110] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.218376][T23110] device bridge_slave_1 entered promiscuous mode
[  991.250069][T23110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  991.265240][T23110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  991.298179][T23110] team0: Port device team_slave_0 added
[  991.311255][T23110] team0: Port device team_slave_1 added
[  991.396481][T23110] device hsr_slave_0 entered promiscuous mode
[  991.453920][T23110] device hsr_slave_1 entered promiscuous mode
[  991.492198][T23110] debugfs: Directory 'hsr0' with parent '/' already present!
[  991.520961][T23110] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.528122][T23110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.535590][T23110] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.542702][T23110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  991.628792][T23110] 8021q: adding VLAN 0 to HW filter on device bond0
[  991.650917][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  991.662999][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.671972][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.684672][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  991.708896][T23110] 8021q: adding VLAN 0 to HW filter on device team0
[  991.727762][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  991.736433][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.743565][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  991.763005][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  991.771474][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.778620][ T3044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.815395][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  991.826103][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  991.844681][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  991.853781][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  991.869495][T23110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  991.881952][T23110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  991.901176][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  991.929545][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  991.937853][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  991.954495][T23110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  992.203724][T23119] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  992.271073][T23119] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  992.296238][T23119] device gretap0 entered promiscuous mode
01:40:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:40:58 executing program 4:
syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local, @local, [], {@mpls_uc={0x8847, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}, @igmp={0x0, 0x0, 0x0, @remote}}}}}}, 0x0)

01:40:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {0x0}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:58 executing program 5:
setuid(0xee01)
semget(0x3, 0x2, 0x38b)

01:40:58 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3}, 0x0, 0x7, r6, 0xb)

01:40:58 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
r7 = open(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r7, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000056c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd5f)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004080)={r8}, 0xc)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc)
poll(&(0x7f0000000080)=[{r2, 0x1}, {r3}, {r9, 0x140c}], 0x3, 0x0)

01:40:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:40:58 executing program 4:
syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x4, 0x0)

01:40:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {0x0}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:58 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:40:58 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000240)='/dev/tty1\x00', 0x0, 0x40282)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d50ef0", 0x3}], 0x1)

01:40:58 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0xffffffffffffff83, 0xfffffefffbf7f77e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x17}, 0x1c)

[  993.328637][   T26] audit: type=1804 audit(1575337259.088:528): pid=23130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/559/memory.events" dev="sda1" ino=17023 res=1
[  993.405536][   T26] audit: type=1800 audit(1575337259.088:529): pid=23130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17023 res=0
01:41:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/45, 0x2d}, {0x0}], 0x2}, 0x40002)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x9cf4, 0x0, 0x0, 0x800e0075d)
shutdown(r1, 0x0)
shutdown(r2, 0x0)

01:41:01 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3}, 0x0, 0x7, r6, 0xb)

01:41:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000001c0)=""/29, 0x1d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x100000069, 0x0, 0x0, 0x800e00507)
shutdown(r0, 0x0)
r2 = dup(r1)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}, {0x0}, {0x0}], 0x3)
shutdown(r3, 0x0)

01:41:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000080)=[{r0, 0x473d5254bc20bd49}], 0x1, 0x42)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xc83df61c, 0x0, 0x0, 0x800e00d81)
open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0x1c, 0x1, 0x0)
poll(&(0x7f00000000c0)=[{}, {}, {r2}], 0x3, 0x4e)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = getpid()
fcntl$lock(r3, 0xe, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffff, 0x100000006, r4})
shutdown(r1, 0x0)

01:41:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

[  995.601504][   T26] audit: type=1804 audit(1575337261.358:530): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir630913042/syzkaller.JHu1t7/477/file0" dev="sda1" ino=17041 res=1
01:41:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000cc0)=""/73, 0x49}, {0x0}, {0x0}], 0x3}, 0x40002)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005ae)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x4e)
shutdown(r2, 0x0)

01:41:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
shutdown(0xffffffffffffffff, 0x0)
getsockname$inet6(0xffffffffffffff9c, 0x0, 0x0)
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x26, 0x0, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000000400))
recvfrom$inet(r0, 0x0, 0x8164, 0x0, 0x0, 0x800e007f9)
shutdown(r0, 0x0)

01:41:01 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {0x0}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/215, 0xd7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x93d0, 0x0, 0x0, 0x800e00509)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
shutdown(r1, 0x0)
r5 = dup2(r3, r4)
fchmod(r5, 0x0)
recvfrom$inet(r2, 0x0, 0x352f, 0x2, 0x0, 0x800e0050e)
shutdown(r4, 0x0)

[  996.067018][   T26] audit: type=1804 audit(1575337261.828:531): pid=23189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/560/memory.events" dev="sda1" ino=17040 res=1
01:41:01 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x0, r6, 0xb)

[  996.156078][   T26] audit: type=1800 audit(1575337261.858:532): pid=23189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17040 res=0
01:41:02 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x3ce, &(0x7f0000000100)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @local}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0)

01:41:02 executing program 4:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x10000)
r0 = dup(0xffffffffffffffff)
write$cgroup_type(r0, &(0x7f0000000000)='thr\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2})
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00')
write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a60cabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87600301b9f01c936f71358e9ec3ff8897ad63aa106dd21ef6e8a75300"/141], 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7b, &(0x7f0000000280)={r8}, &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r8, 0x58, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x39, @dev={0xfe, 0x80, [], 0xc}, 0x691bd245}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xae7b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x10000)
fcntl$setpipe(r10, 0x407, 0x3ff)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

01:41:02 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {0x0}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:02 executing program 5:
r0 = syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100))

[  996.479646][   T26] audit: type=1804 audit(1575337262.238:533): pid=23230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/561/memory.events" dev="sda1" ino=17025 res=1
01:41:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x40000000084)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d2d761376bf21f18b501cb7f0b", 0xd}], 0x1)

[  996.555266][   T26] audit: type=1800 audit(1575337262.268:534): pid=23230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17025 res=0
01:41:02 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x0, r6, 0xb)

[  996.624684][    C1] sd 0:0:1:0: [sg0] tag#7311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  996.634269][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB: Test Unit Ready
[  996.640753][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640786][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640814][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640854][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640882][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640911][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640937][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640964][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.640987][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.641007][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.641027][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.641048][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.641069][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.641089][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  996.641108][    C1] sd 0:0:1:0: [sg0] tag#7311 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  997.308791][    C1] sd 0:0:1:0: [sg0] tag#7324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  997.322829][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB: Test Unit Ready
[  997.329317][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.339019][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.348775][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.358468][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368091][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368118][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368143][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368168][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368193][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368218][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368240][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368262][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368283][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368306][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  997.368328][    C1] sd 0:0:1:0: [sg0] tag#7324 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  997.602921][   T26] audit: type=1804 audit(1575337263.368:535): pid=23260 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/562/memory.events" dev="sda1" ino=17029 res=1
[  997.703489][   T26] audit: type=1800 audit(1575337263.368:536): pid=23260 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17029 res=0
[  999.990602][T23274] IPVS: ftp: loaded support on port[0] = 21
[ 1000.149014][T23274] chnl_net:caif_netlink_parms(): no params data found
[ 1000.216620][T23274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.232111][T23274] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.240501][T23274] device bridge_slave_0 entered promiscuous mode
[ 1000.249992][T23274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.258346][T23274] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1000.273211][T23274] device bridge_slave_1 entered promiscuous mode
[ 1000.308454][T23274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.321086][T23274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1000.358200][T23274] team0: Port device team_slave_0 added
[ 1000.368491][T23274] team0: Port device team_slave_1 added
[ 1000.459452][T23274] device hsr_slave_0 entered promiscuous mode
[ 1000.513779][T23274] device hsr_slave_1 entered promiscuous mode
[ 1000.552135][T23274] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1000.583509][T23274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.591223][T23274] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1000.598711][T23274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.605873][T23274] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.694388][T23274] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1000.721260][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1000.730662][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.739644][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1000.750562][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1000.768857][T23274] 8021q: adding VLAN 0 to HW filter on device team0
[ 1000.790349][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1000.799743][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.806989][ T9095] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.833754][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1000.843451][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.850567][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1000.889841][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1000.899496][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1000.922922][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1000.931113][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1000.945524][T23274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1000.959073][T23274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1000.973139][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1000.998237][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1001.006765][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1001.023777][T23274] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1001.329396][T23284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1001.387035][T23284] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1001.418719][T23284] device gretap0 entered promiscuous mode
01:41:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {0x0}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:07 executing program 5:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x10000)
r0 = dup(0xffffffffffffffff)
write$cgroup_type(r0, &(0x7f0000000000)='thr\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2})
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00')
write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a60cabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87600301b9f01c936f71358e9ec3ff8897ad63aa106dd21ef6e8a75300"/141], 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7b, &(0x7f0000000280), &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x39, @dev={0xfe, 0x80, [], 0xc}, 0x691bd245}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xae7b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r8, 0x10000)
fcntl$setpipe(r8, 0x407, 0x3ff)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

01:41:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT(0xffffffffffffffff, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xada141bc4ddaba53})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:41:07 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x0, r6, 0xb)

01:41:07 executing program 4:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x10000)
r0 = dup(0xffffffffffffffff)
write$cgroup_type(r0, &(0x7f0000000000)='thr\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2})
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00')
write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a60cabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87600301b9f01c936f71358e9ec3ff8897ad63aa106dd21ef6e8a75300"/141], 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7b, &(0x7f0000000280)={r8}, &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r8, 0x58, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x39, @dev={0xfe, 0x80, [], 0xc}, 0x691bd245}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xae7b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x10000)
fcntl$setpipe(r10, 0x407, 0x3ff)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

[ 1001.627638][    C0] sd 0:0:1:0: [sg0] tag#7352 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1001.637344][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB: Test Unit Ready
[ 1001.643906][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.653553][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.663257][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.663288][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.663310][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.663349][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.703329][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.712979][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.722800][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.732472][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.742117][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.751808][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.761603][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
01:41:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[ 1001.771272][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1001.780934][    C0] sd 0:0:1:0: [sg0] tag#7352 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
01:41:07 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[ 1002.513743][    C0] sd 0:0:1:0: [sg0] tag#7354 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1002.523237][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB: Test Unit Ready
[ 1002.529677][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.539348][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.548993][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.558626][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.568235][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.577886][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.587559][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.597837][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.607501][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.612886][   T26] audit: type=1804 audit(1575337268.368:537): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/563/memory.events" dev="sda1" ino=17072 res=1
[ 1002.617145][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.652122][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.661716][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.671389][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.681037][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.690727][    C0] sd 0:0:1:0: [sg0] tag#7354 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.699404][    C0] sd 0:0:1:0: [sg0] tag#7296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
01:41:08 executing program 0:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x10000)
r0 = dup(0xffffffffffffffff)
write$cgroup_type(r0, &(0x7f0000000000)='thr\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2})
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00')
write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a60cabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87600301b9f01c936f71358e9ec3ff8897ad63aa106dd21ef6e8a75300"/141], 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7b, &(0x7f0000000280)={r8}, &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r8, 0x58, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x39, @dev={0xfe, 0x80, [], 0xc}, 0x691bd245}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xae7b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r10, 0x10000)
fcntl$setpipe(r10, 0x407, 0x3ff)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

01:41:08 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[ 1002.708913][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB: Test Unit Ready
[ 1002.715445][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.725081][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.734738][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.744350][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.753971][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
01:41:08 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0xb)

[ 1002.753997][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.773197][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.782872][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.792511][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.802169][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.807344][   T26] audit: type=1800 audit(1575337268.408:538): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17072 res=0
[ 1002.811745][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.842571][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.852198][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.852224][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.852248][    C0] sd 0:0:1:0: [sg0] tag#7296 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.904224][    C1] sd 0:0:1:0: [sg0] tag#7302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1002.913750][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB: Test Unit Ready
[ 1002.920624][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.930275][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.941560][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.951218][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.960828][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.970426][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.980031][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.989630][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1002.999258][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
01:41:08 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

[ 1003.008859][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.018472][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.028093][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.037745][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.047393][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.057012][    C1] sd 0:0:1:0: [sg0] tag#7302 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
01:41:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:09 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:09 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "eb24aeb02b65aaef0b6f912adc5dee85"}, 0x11, 0x0)
pipe(0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
fsetxattr$security_capability(r0, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000240)=@v2, 0x14, 0x0)

01:41:09 executing program 5:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x10000)
r0 = dup(0xffffffffffffffff)
write$cgroup_type(r0, &(0x7f0000000000)='thr\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2})
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00')
write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a60cabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87600301b9f01c936f71358e9ec3ff8897ad63aa106dd21ef6e8a75300"/141], 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7b, &(0x7f0000000280), &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x39, @dev={0xfe, 0x80, [], 0xc}, 0x691bd245}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xae7b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r8, 0x10000)
fcntl$setpipe(r8, 0x407, 0x3ff)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

01:41:09 executing program 0:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81004c008137ffff001e0201ffffffff0000000000046c51000000004dc84786bcd4007f"], &(0x7f0000000340))

[ 1003.553335][   T26] audit: type=1804 audit(1575337269.308:539): pid=23341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/564/memory.events" dev="sda1" ino=17062 res=1
01:41:09 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0)

[ 1003.685861][   T26] audit: type=1800 audit(1575337269.308:540): pid=23341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17062 res=0
[ 1003.775330][    C1] sd 0:0:1:0: [sg0] tag#7332 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1003.784878][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB: Test Unit Ready
[ 1003.791348][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.801013][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.810641][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.820294][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.822190][   T26] audit: type=1804 audit(1575337269.398:541): pid=23354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir820204542/syzkaller.BU6434/461/bus" dev="sda1" ino=16561 res=1
[ 1003.829883][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.864056][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.873680][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.883307][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.892935][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.902617][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.912224][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
01:41:09 executing program 4:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x4000000007, &(0x7f0000000080))
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
read(r2, &(0x7f0000000000)=""/128, 0xfffffd67)
signalfd4(r2, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0)

[ 1003.921804][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.931426][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.941067][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.950741][    C1] sd 0:0:1:0: [sg0] tag#7332 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[ 1003.975141][   T26] audit: type=1804 audit(1575337269.418:542): pid=23354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir820204542/syzkaller.BU6434/461/bus" dev="sda1" ino=16561 res=1
01:41:09 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:10 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {0x0}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:10 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

01:41:10 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:10 executing program 4:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080))

[ 1004.656375][T23385] input: syz1 as /devices/virtual/input/input16
01:41:10 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:10 executing program 4:

[ 1005.063574][   T26] audit: type=1804 audit(1575337270.828:543): pid=23364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/565/memory.events" dev="sda1" ino=16722 res=1
01:41:11 executing program 5:

01:41:11 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

01:41:11 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0)

[ 1005.264179][   T26] audit: type=1800 audit(1575337270.848:544): pid=23364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16722 res=0
01:41:11 executing program 4:

01:41:11 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x5, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

[ 1005.459282][   T26] audit: type=1804 audit(1575337271.218:545): pid=23406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/566/memory.events" dev="sda1" ino=16817 res=1
[ 1005.522284][T23410] input: syz1 as /devices/virtual/input/input18
[ 1005.609669][   T26] audit: type=1800 audit(1575337271.258:546): pid=23406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16817 res=0
[ 1007.244720][T23428] IPVS: ftp: loaded support on port[0] = 21
[ 1007.390117][T23428] chnl_net:caif_netlink_parms(): no params data found
[ 1007.440899][T23428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.448214][T23428] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.456598][T23428] device bridge_slave_0 entered promiscuous mode
[ 1007.466526][T23428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.473837][T23428] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.482689][T23428] device bridge_slave_1 entered promiscuous mode
[ 1007.512782][T23428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1007.525538][T23428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1007.552926][T23428] team0: Port device team_slave_0 added
[ 1007.561210][T23428] team0: Port device team_slave_1 added
[ 1007.618676][T23428] device hsr_slave_0 entered promiscuous mode
[ 1007.672884][T23428] device hsr_slave_1 entered promiscuous mode
[ 1007.712216][T23428] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1007.739712][T23428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.746880][T23428] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1007.754407][T23428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.761489][T23428] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1007.843029][T23428] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1007.871161][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1007.880312][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.889424][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.901206][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1007.921133][T23428] 8021q: adding VLAN 0 to HW filter on device team0
[ 1007.940587][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1007.950043][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.957179][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1007.977960][ T9095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1007.987397][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.994551][ T9095] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1008.015043][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1008.029253][T19328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1008.057782][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1008.066779][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1008.084578][T23428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1008.097662][T23428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1008.107437][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1008.137278][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1008.145819][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1008.161808][T23428] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1008.453626][T23438] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1008.516791][T23438] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1008.555996][T23438] device gretap0 entered promiscuous mode
01:41:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:14 executing program 5:

01:41:14 executing program 4:

01:41:14 executing program 1:
socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a10, 0x1700)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x711000)
openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc020660b, 0x711000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc020660b, 0x711000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xdf, 0x8, 0x0, 0x40, 0x0, 0x3607e734, 0x100, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x3}, 0x25, 0x100000001, 0x3bcbbf02, 0x0, 0xdd0, 0x3, 0x101}, 0x0, 0x7, 0xffffffffffffffff, 0x0)

01:41:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:14 executing program 0:

01:41:14 executing program 0:

01:41:14 executing program 5:

01:41:14 executing program 4:

01:41:14 executing program 0:

01:41:14 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:14 executing program 5:

[ 1009.352410][   T26] audit: type=1804 audit(1575337275.108:547): pid=23451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir722653267/syzkaller.CCrYz1/567/memory.events" dev="sda1" ino=16977 res=1
[ 1009.412159][   T26] audit: type=1800 audit(1575337275.108:548): pid=23451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16977 res=0
01:41:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:15 executing program 4:

01:41:15 executing program 0:
r0 = getpgid(0x0)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000080)={{0xff, 0x1f, 0x8, 0x7, 0x5, 0x4}, 0x674, 0x3ff, 0xfffa, 0x928f, 0x4, "e8e2450e729a7b58df29cc49727fc6b14e18114f9566dcc75a813b06f2786f3d087f0b2f383467e10a7fa5b4c7aacc023adaf1872e62a79d3613fbc986bcadcbd92adab72b82ca99e14b94d580f3b8ab89b0cf3a8185fce45da3810e679931c8701cf5b30e5ebf19e4a22ee85369c346c022be75ae440035e75d905a60bfd563"})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x1, 0x2000)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)

01:41:15 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x33684dad}], 0x1000000000000031, 0x0)
recvmsg(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000140)=""/146, 0x92}], 0x3, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0)

01:41:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:15 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000000140)=""/146, 0x92}], 0x4, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0)

01:41:15 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000580)=""/226, 0xe2}, {0x0}, {0x0}], 0x4, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0)

01:41:15 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/158, &(0x7f0000000200)=0x9e)

01:41:15 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/220, 0xdc}, {0x0}, {0x0}, {&(0x7f0000000140)=""/146, 0x92}], 0x4, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0)

01:41:15 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:15 executing program 1:
syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x2d2, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
ustat(0x6, &(0x7f00000001c0))

[ 1010.105374][T23495] syz-executor.5 (23495): /proc/23494/oom_adj is deprecated, please use /proc/23494/oom_score_adj instead.
01:41:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:16 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/158, &(0x7f0000000200)=0x9e)

01:41:16 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x9, 0x9, 0x914, 0x2}, 0x3c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20)

01:41:16 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000580)=""/226, 0xe2}, {0x0}, {0x0}], 0x4, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0)

01:41:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:16 executing program 1:
syz_open_dev$tty(&(0x7f0000000040)='/dev/tty1#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x2d2, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
ustat(0x6, &(0x7f00000001c0))

01:41:16 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x2)
io_setup(0x0, 0x0)

01:41:16 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/158, &(0x7f0000000200)=0x9e)

01:41:16 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, r1+30000000})

01:41:16 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x12)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="68002cbd7000ffdbdf25030000000c0008000d0b0000000000000c00060001000000000000001c00070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000300090092b7200000000000000c00080002000000008bcfad3c042c"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0xc080)
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0))
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
timer_create(0x2, 0x0, 0x0)
io_setup(0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x6)
ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000300)=0x1)

01:41:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='setgroups\x00')
dup2(r0, r1)

01:41:16 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
tkill(0x0, 0x9)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
syz_emit_ethernet(0x16f, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "7f81dd", 0x139, 0x0, 0x0, @dev, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@srh, @fragment, @dstopts], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "af266d", 0x0, 0x0, 0x0, @ipv4={[], [], @empty}, @ipv4, [@hopopts={0x0, 0x1, [], [@pad1, @ra, @generic]}, @srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@dev, @rand_addr="a64d3cb2a7b617de64feb4df9d3fab71", @loopback, @empty]}, @dstopts={0x0, 0x4, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @hao={0xc9, 0x10, @rand_addr="45ee0000000000000000000000000008"}]}, @routing={0x0, 0x4, 0x0, 0x0, 0x0, [@ipv4={[], [], @loopback}, @mcast1]}], "c0ca705de1e04e01a7484dd362ccb5a6ef9a891605475de2426fda4ad199b433e381bf5173927500e0f87e804e609e7e0049ae580f0b5bb715"}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x3c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')

[ 1013.188252][T23568] IPVS: ftp: loaded support on port[0] = 21
[ 1013.356432][T23568] chnl_net:caif_netlink_parms(): no params data found
[ 1013.398616][T23568] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.405877][T23568] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.415883][T23568] device bridge_slave_0 entered promiscuous mode
[ 1013.425794][T23568] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.433101][T23568] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.441785][T23568] device bridge_slave_1 entered promiscuous mode
[ 1013.485880][T23568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.498623][T23568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.528429][T23568] team0: Port device team_slave_0 added
[ 1013.542892][T23568] team0: Port device team_slave_1 added
[ 1013.607771][T23568] device hsr_slave_0 entered promiscuous mode
[ 1013.652686][T23568] device hsr_slave_1 entered promiscuous mode
[ 1013.702392][T23568] debugfs: Directory 'hsr0' with parent '/' already present!
[ 1013.731057][T23568] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.738208][T23568] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1013.745646][T23568] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.752747][T23568] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1013.832459][T23568] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1013.859936][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1013.870520][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.880357][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.891587][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1013.911819][T23568] 8021q: adding VLAN 0 to HW filter on device team0
[ 1013.929885][ T9094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1013.939345][ T9094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.946517][ T9094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1013.966126][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1013.975208][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.982334][ T3044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1014.009004][T22472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1014.026095][T22472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1014.036458][T22472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1014.061615][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1014.070797][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1014.086333][T23568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1014.117148][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1014.127720][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1014.144171][T23568] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1014.383707][T23579] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1014.459578][T23579] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1014.476785][T23579] device gretap0 entered promiscuous mode
01:41:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:20 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/158, &(0x7f0000000200)=0x9e)

01:41:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00))
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, 0x0)

01:41:20 executing program 1:
r0 = socket(0x10, 0x4000000000000002, 0xc)
write(r0, &(0x7f0000000140)="1f0000000106ff00fd4354c007110000f305010008000600010423dcffdf00", 0x1f)

01:41:20 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)

01:41:20 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x1001000200000000, 0x0, 0xc00, 0x0, [0xff0f, 0x3800000]})
geteuid()
socket(0x10, 0x2, 0x0)
setreuid(0x0, 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
socket(0x10, 0x2, 0x0)
setreuid(0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(r1, 0x0)
setresgid(0xffffffffffffffff, r1, 0x0)
getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xee01])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
fstat(r2, &(0x7f0000000080))
setregid(0x0, 0x0)
syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x2000, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0)

[ 1014.628035][T23591] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
01:41:20 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)

[ 1014.725899][T23599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:41:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00))
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, 0x0)

01:41:20 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0)

[ 1014.861804][T23605] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
01:41:20 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)

01:41:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00))
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0x2f}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xe7}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, 0x0)

01:41:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = gettid()
fcntl$getflags(0xffffffffffffffff, 0x0)
lstat(0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c)
r2 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x0, 0x0, 0x0)
tkill(r1, 0x800000000000014)

01:41:21 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)

01:41:21 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)

[ 1015.431207][T23641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
01:41:21 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)

01:41:21 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00))
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xffffffffffffff12}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0xffffffffffffff39}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xea}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, 0x0})

[ 1015.644506][T23634] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
01:41:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000300)=ANY=[@ANYBLOB="02"])

01:41:21 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)

01:41:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getegid()
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0)
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
nanosleep(&(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000004c0))
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="390000001300090468fe0700000000000000ff3f04000000450100010000000004002b000a00010014a4ee1ee438d2fd000000000000006e00", 0x39}], 0x1)

01:41:21 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00))
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xffffffffffffff12}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0xffffffffffffff39}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xea}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, 0x0})

01:41:21 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)

[ 1015.970849][  T173] device bridge_slave_1 left promiscuous mode
[ 1016.007739][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.049534][T23672] ==================================================================
[ 1016.058244][T23672] BUG: KASAN: vmalloc-out-of-bounds in kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.066857][T23672] Write of size 4 at addr ffffc90000eae050 by task syz-executor.4/23672
[ 1016.075192][T23672] 
[ 1016.077539][T23672] CPU: 0 PID: 23672 Comm: syz-executor.4 Not tainted 5.4.0-syzkaller #0
[ 1016.085892][T23672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1016.096064][T23672] Call Trace:
[ 1016.099482][T23672]  dump_stack+0x197/0x210
[ 1016.103852][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.109604][T23672]  print_address_description.constprop.0.cold+0x5/0x30b
[ 1016.116578][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.122242][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.127906][T23672]  __kasan_report.cold+0x1b/0x41
[ 1016.133023][T23672]  ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b
[ 1016.138597][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.144251][T23672]  kasan_report+0x12/0x20
[ 1016.148602][T23672]  __asan_report_store4_noabort+0x17/0x20
[ 1016.154326][T23672]  kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.154359][T23672]  ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160
[ 1016.154439][T23672]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1016.154498][T23672]  ? _copy_from_user+0x12c/0x1a0
[ 1016.176935][T23672]  kvm_arch_dev_ioctl+0x300/0x4b0
[ 1016.181988][T23672]  ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0
[ 1016.188168][T23672]  ? tomoyo_path_number_perm+0x454/0x520
[ 1016.193836][T23672]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1016.200106][T23672]  ? tomoyo_path_number_perm+0x25e/0x520
[ 1016.205837][T23672]  kvm_dev_ioctl+0x127/0x17d0
[ 1016.210543][T23672]  ? kvm_put_kvm+0xcc0/0xcc0
[ 1016.215153][T23672]  ? kvm_put_kvm+0xcc0/0xcc0
[ 1016.219769][T23672]  do_vfs_ioctl+0xdb6/0x13e0
[ 1016.224387][T23672]  ? compat_ioctl_preallocate+0x210/0x210
[ 1016.230121][T23672]  ? __fget+0x37f/0x550
[ 1016.234314][T23672]  ? ksys_dup3+0x3e0/0x3e0
[ 1016.238820][T23672]  ? nsecs_to_jiffies+0x30/0x30
[ 1016.243706][T23672]  ? tomoyo_file_ioctl+0x23/0x30
[ 1016.248665][T23672]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1016.254989][T23672]  ? security_file_ioctl+0x8d/0xc0
[ 1016.260121][T23672]  ksys_ioctl+0xab/0xd0
[ 1016.264291][T23672]  __x64_sys_ioctl+0x73/0xb0
[ 1016.268919][T23672]  do_syscall_64+0xfa/0x790
[ 1016.273444][T23672]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1016.279350][T23672] RIP: 0033:0x45a679
[ 1016.283261][T23672] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1016.303132][T23672] RSP: 002b:00007fc550ba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1016.303146][T23672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679
[ 1016.303158][T23672] RDX: 0000000020000300 RSI: 00000000c008ae09 RDI: 0000000000000003
[ 1016.303164][T23672] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1016.303172][T23672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc550baa6d4
[ 1016.303179][T23672] R13: 00000000004c3be2 R14: 00000000004d9128 R15: 00000000ffffffff
[ 1016.303202][T23672] 
[ 1016.319557][T23672] 
[ 1016.319564][T23672] Memory state around the buggy address:
[ 1016.319578][T23672]  ffffc90000eadf00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[ 1016.319589][T23672]  ffffc90000eadf80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[ 1016.319600][T23672] >ffffc90000eae000: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9
[ 1016.319607][T23672]                                                  ^
01:41:22 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0xfffffffffffffd2a, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x3f2, 0x0, 0x0)
shutdown(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4)
clock_gettime(0x0, &(0x7f0000004c00))
recvmmsg(r0, &(0x7f0000004980)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000340)=""/46, 0x2e}], 0x6, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/15, 0xffffffffffffff12}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/203, 0xcb}], 0xa, &(0x7f0000000c00)=""/122, 0x7a}}, {{&(0x7f0000000c80)=@vsock, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004d00)=""/192, 0xc0}, {&(0x7f0000000280)=""/56, 0x38}], 0x2, &(0x7f0000000d40)=""/82, 0x52}}, {{&(0x7f0000000dc0)=@pppoe, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/197, 0xc5}, {&(0x7f0000000fc0)=""/89, 0x59}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/47, 0xffffffffffffff39}], 0x6, &(0x7f0000001200)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/187, 0xbb}], 0x1, &(0x7f00000023c0)=""/170, 0xaa}}, {{&(0x7f0000002480)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/199, 0xc7}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002740)=""/139, 0x8b}, {&(0x7f0000002800)=""/184, 0xb8}, {&(0x7f0000002680)}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x6, &(0x7f00000029c0)=""/231, 0xea}}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b40)=""/179, 0xb3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/97, 0x61}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/97, 0x61}], 0x5, &(0x7f0000002e80)=""/143, 0x8f}}, {{&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000003300)=[{&(0x7f0000004dc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/240, 0xf0}, {&(0x7f00000026c0)=""/43, 0x2b}, {&(0x7f0000003180)=""/111, 0x6f}, {&(0x7f0000003200)=""/241, 0xf1}], 0x5}}, {{&(0x7f0000003380)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @bcast, @rose, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000003400)=[{&(0x7f00000044c0)=""/255, 0xff}], 0x1, &(0x7f00000045c0)=""/93, 0x5d}}, {{&(0x7f0000004640)=@can, 0x80, &(0x7f00000048c0)=[{&(0x7f00000046c0)=""/114, 0x72}, {&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/169, 0xa9}], 0x4, &(0x7f0000004900)=""/70, 0x46}}], 0xa, 0x0, &(0x7f0000004c40)={0x0, 0x0})

01:41:22 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/10)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x8}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00\x00\x00\x00\x00\x00\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6)

01:41:22 executing program 0:

[ 1016.319624][T23672]  ffffc90000eae080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[ 1016.401629][T23672]  ffffc90000eae100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
[ 1016.409694][T23672] ==================================================================
[ 1016.409700][T23672] Disabling lock debugging due to kernel taint
[ 1016.464982][  T173] device bridge_slave_0 left promiscuous mode
[ 1016.479564][T23672] Kernel panic - not syncing: panic_on_warn set ...
[ 1016.482045][    C1] kobject: 'brport' (000000003ee32ed5): kobject_cleanup, parent 0000000015b87c9b
[ 1016.486237][T23672] CPU: 0 PID: 23672 Comm: syz-executor.4 Tainted: G    B             5.4.0-syzkaller #0
[ 1016.495366][    C1] kobject: 'brport' (000000003ee32ed5): calling ktype release
01:41:22 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty(&(0x7f00000004c0)='/dev/ttyS#\x00', 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5453, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x8, &(0x7f0000000000)={0xaf})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x40000017b]})
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc)

[ 1016.505039][T23672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1016.505045][T23672] Call Trace:
[ 1016.505073][T23672]  dump_stack+0x197/0x210
[ 1016.505147][T23672]  panic+0x2e3/0x75c
[ 1016.505167][T23672]  ? add_taint.cold+0x16/0x16
[ 1016.512695][    C1] kobject: 'brport': free name
[ 1016.522710][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.522731][T23672]  ? preempt_schedule+0x4b/0x60
[ 1016.528803][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.530335][T23672]  ? ___preempt_schedule+0x16/0x18
[ 1016.530464][T23672]  ? trace_hardirqs_on+0x5e/0x240
[ 1016.571889][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.577557][T23672]  end_report+0x47/0x4f
[ 1016.581745][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.587424][T23672]  __kasan_report.cold+0xe/0x41
[ 1016.592305][T23672]  ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b
[ 1016.597869][T23672]  ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.599017][ T4081] kobject: 'loop0' (0000000039591068): kobject_uevent_env
[ 1016.603509][T23672]  kasan_report+0x12/0x20
[ 1016.603524][T23672]  __asan_report_store4_noabort+0x17/0x20
[ 1016.603539][T23672]  kvm_dev_ioctl_get_cpuid+0xad7/0xb0b
[ 1016.603553][T23672]  ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160
[ 1016.603576][T23672]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1016.638206][T23672]  ? _copy_from_user+0x12c/0x1a0
[ 1016.643170][T23672]  kvm_arch_dev_ioctl+0x300/0x4b0
[ 1016.648215][T23672]  ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0
[ 1016.654319][T23672]  ? tomoyo_path_number_perm+0x454/0x520
[ 1016.659958][T23672]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1016.666200][T23672]  ? tomoyo_path_number_perm+0x25e/0x520
[ 1016.671817][T23672]  kvm_dev_ioctl+0x127/0x17d0
[ 1016.676475][T23672]  ? kvm_put_kvm+0xcc0/0xcc0
[ 1016.681049][T23672]  ? kvm_put_kvm+0xcc0/0xcc0
[ 1016.685619][T23672]  do_vfs_ioctl+0xdb6/0x13e0
[ 1016.690190][T23672]  ? compat_ioctl_preallocate+0x210/0x210
[ 1016.695888][T23672]  ? __fget+0x37f/0x550
[ 1016.700025][T23672]  ? ksys_dup3+0x3e0/0x3e0
[ 1016.704432][T23672]  ? nsecs_to_jiffies+0x30/0x30
[ 1016.709264][T23672]  ? tomoyo_file_ioctl+0x23/0x30
[ 1016.714192][T23672]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1016.720412][T23672]  ? security_file_ioctl+0x8d/0xc0
[ 1016.725514][T23672]  ksys_ioctl+0xab/0xd0
[ 1016.729660][T23672]  __x64_sys_ioctl+0x73/0xb0
[ 1016.734233][T23672]  do_syscall_64+0xfa/0x790
[ 1016.738730][T23672]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1016.744601][T23672] RIP: 0033:0x45a679
[ 1016.748492][T23672] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1016.768073][T23672] RSP: 002b:00007fc550ba9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1016.776471][T23672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679
[ 1016.784422][T23672] RDX: 0000000020000300 RSI: 00000000c008ae09 RDI: 0000000000000003
[ 1016.792384][T23672] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1016.800347][T23672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc550baa6d4
[ 1016.808299][T23672] R13: 00000000004c3be2 R14: 00000000004d9128 R15: 00000000ffffffff
[ 1016.817689][T23672] Kernel Offset: disabled
[ 1016.822132][T23672] Rebooting in 86400 seconds..