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"}, @NFTA_DATA_VALUE={0x5a, 0x1, "7db4e6a758d16f04fc696700ac8f277a818ebbaffd709a0ba92ed1fea599cd36bcf5724e3376b37289e93dd9593dfe0e8d5ac34af253261ec52ebc23c2017fca59d18f5e28edb6525ba3510134095ec53fbcca41fb53"}]}]}, {0x1120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x10e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "f82fa176b059f035c88e3d2705267cb98ee79ce9f8da101aeed175afe56e29167a040dcc3454b21f1189a65ebe181f0b0eec9cc59227328bfea5fe79f1004d438dc39091d3a49b984d89db88ed502f97e0487ffd5d9e7ac9594b17bd7378e14ac5ad2acfd35c01e87b442ebed7eed70479d1e07c292315250d3da47cf9811f383211636908e276051162533cd99257a15e9703c4125e328e22c3b5ce2e54eec0f0daed5b83ae42032df4a72df0dfdce096e00ef3f72a85daee4808fb96e5f39fc40fb60706aa2c29"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x17c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@osf={{0x8, 0x1, 'osf\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_FLAGS={0x8}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}]}, {0x30, 0x1, 0x0, 0x1, [@log={{0x8, 0x1, 'log\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x400}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xbb33}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @void}]}, {0xf0, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, '/dev/full\x00'}, @NFTA_MATCH_INFO={0x7b, 0x3, "eea66e65d37f2c5180713e95de1ad27bab0a51b37d2ba5d1e4355d9ca9e35b69701c49e6341ed8912301de91aa97cf81f0eb68b5c43a6f8db2b91c8a2f3aac237746ee06eff2d7b41db2db838d0ce1d3c2ead30e2b702239c5688827f8c213dc6ec71277729972032e65da8f774f06f274ae1d126ebfa3"}, @NFTA_MATCH_NAME={0xe, 0x1, '/dev/full\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x77}]}}]}]}]}, @NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x706, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0x82, 0xd, 0x1, 0x0, "6857d9eb8653b971c82e864ed6d17a43aa11ae9ee4f536af6325540b9ef9c020bc71e05b188672d93ad89bb6aa107e15b9bf83e85623c5354c4958418e9349433df3d7da0469fc3c7633c4b94168e412e772cbffc09dff5374151778ab7cf0964a5142cb6d54bf5112be3c624555f9eaeacaa11547a6dabc37a341338645"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2abc, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x1a3c, 0x4, 0x0, 0x1, [{0x1810, 0x1, 0x0, 0x1, [@objref={{0xb, 0x1, 'objref\x00'}, @void}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", "", ""]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x1728, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1a8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "7fab95b289fcced511ab2559eb1acd28bd0cca5f373ed9a3895967150095d84c0daf9ca58e77db269dc71553c279c5c8fdce743fe6db9748bc55a30b63c085c0c223aa3d444121e1bbefba125f358d4b14f6172c107497d8b6d86e0267def2ec493f00300e1d7860c68ff146ea88793d3bf6193a0a577acdc807387fe73cb10a0dcb0c8ad5e6b042bc143ad292169b7828df63941bc9767ddcb6daa2b8a2f7a4caf0b39dec54b6ce0fa87d5eea2973aeba1fa336a5a714d533158fec81e2866b1f9ff17c76f4bf59e8788f4f93800240fe890d23379cbeee4254980a7f0b74612078f3d757"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "0c6fe0dab32966037a3878b75b9737a316db1baf8608c31baa8906ac59c4c8279b9361d4bb6999f7f575789692f86ac264acfd7551c203acb29dcf5594fd68a9f5fa993f86e116"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x45, 0x1, "c532e17921ead87e880ade065595a8edc513e5a8bfcf781ca1c07b8d3e53a772ccb103998ac012444b73c8f7a9a0cd9f4bba7e073f89a27a36e2b874c02f4fe58a"}]}, @NFTA_CMP_DATA={0x274, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2e, 0x1, "8c0f8a183c7bf8648905f276843e8ef0ba3494d3e61bbb6b207d54ebb23b6a78c81c4c57d866b3725dfd"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "fb560bc875c92c8a3bde2e5ee46d0dcc7a72c57bf3da1c5815a2307615b35f136f3602c1db18087eb7134c5a061678ecbdfa9d938a3a11022ee5236bc23f7d2524f79014fe"}, @NFTA_DATA_VALUE={0x6c, 0x1, "c2596ae1f86e0185bb790c54971901d6f1dd13cc070afdb203f6aea7771df5bfef4f1c91b1d8900dedb0c520dbb310b118c4a8286eb117ef95fce4b179b01edea410285ca4cddb2810d505761add5f90dd0513332a2224d63eb6be398ff81ddc79ec6a2d854710ad"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_DATA={0xec, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "8e12bc20cc5d5e29b03323b49db4b8f6a063f422cb34ef4b6de421e6a4d4857ef623ff0414ea91522e717be8262ae644139adfe4bfc11352c90a52d50be6981334dca8204d54efe4ac73b8fea180d82c92c06e0cd830a67bf7c2009159a62fa3cc39946026fefdd7dd6dc0a66c7f501a5559583125f9d570650f44521fb5c90509671854c415c77640c08d69f158a3ff08fe103d05ba762a013ad2eba4d735d13a09a29e530bd6f710431209dda8912015d33efb277e4ed52bce60f2e6fe3973a56c06f642162ca012c1ca835228a18ea82fe302af5cbf7857d97dbc90d54b4063d1633b"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x16c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "45a01a5bb183f718a6f4ac24d29031fec94aad4546c7da3e8f1460c39974d457d4a6b13f57169735325017549135cac1b8153f5b20bdcdd82900f12b1bf6f45ec8a70ffc8768c4219cfd92c4d16f6750b86fe1724558c2ecea1637588562a52255099f5337ed30a75e7e783ac766fe9f6b9aeb59ea61aa3557fa7b1e1a7767334cc9371bd896e7a86cf05a0f15892ac2b514bd8b75e4eed3bc593cfc4820c47702660c0ef91e4a390afae26e3e1ff4967fd490a5dbb489ffff0f648380d3fe4c13dea4087071fa701d617df74b74b487eccd65079f9e9844e5fc5827798ba9c8de588fdc27c3a7345acdbc02ef13fc"}, @NFTA_DATA_VALUE={0x2d, 0x1, "0bd9be49fe932e33a0b28ebe6e7e72855b6793e3a23cde5e17320600f2f5f0aeeeb2b1b039f1de3680"}, @NFTA_DATA_VALUE={0x18, 0x1, "b7322de11d95180a87b98a713909758f577c3be9"}]}, @NFTA_CMP_DATA={0x1098, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}]}, {0x228, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VALUE={0x63, 0x1, "325fc9169c335b586d52a652b7fe66a1a7abf9805312246321f8be7996c20db82cb31ee4eb4d8063b3a05e63ea4a1450dab71e2d833b956382696d1c424fdaba7a25e0317f6d112cb732975753d33c6a11b593c7ee051903d5cfb8a431b03c"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x6}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x88}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x81}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x5398}}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 742.052102][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 742.052117][ T29] audit: type=1800 audit(1593082006.928:871): pid=26993 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x2}}}], 0x1fee00) 10:46:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4000000000010046) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xfff, 0x4) 10:46:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:47 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e6f4af6040085a070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r2, 0x0, 0xb, 0xf) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x80) 10:46:47 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x2, [0x100, 0x3]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000180)={r6, 0x6, 0x47f, 0x8, 0x10001, 0x1}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 742.327579][ T29] audit: type=1800 audit(1593082007.198:872): pid=27008 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) r1 = socket(0x10, 0xa, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0x3000, 0x3000, 0x80000001, 0x1, 0x5}) sendfile(r1, r0, 0x0, 0x4000000000010046) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0x8000, 0x62, 0x40, 0x81, 0x8d, 0x8, 0x6, 0x7, 0x20, 0xbe, 0x3, 0x0, 0xcfba}, {0x200, 0x5, 0x1, 0x2, 0x8, 0x5, 0x6, 0xbc, 0x0, 0x78, 0x10, 0x81, 0x7ff}, {0x3ff, 0x6, 0x6, 0xff, 0x3, 0x3, 0x0, 0x8, 0x20, 0x5, 0x5, 0x68, 0x10000}], 0x4}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000000c0)=""/34, &(0x7f0000000100)=0x22) [ 742.401285][ T29] audit: type=1800 audit(1593082007.238:873): pid=27008 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x3}}}], 0x1fee00) 10:46:47 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x3ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) connect(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @remote}, 0x3, 0x1, 0x1, 0x2}}, 0x80) 10:46:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 742.603578][ T29] audit: type=1800 audit(1593082007.478:874): pid=27032 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 742.677869][ T29] audit: type=1800 audit(1593082007.508:875): pid=27032 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:47 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) move_pages(r0, 0x6, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000040)=[0x7, 0x5, 0x7ff, 0xf1], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0) exit_group(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4000000000010046) 10:46:47 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x81800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfff) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x1c}]) 10:46:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x4}}}], 0x1fee00) 10:46:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 743.093342][ T29] audit: type=1800 audit(1593082007.958:876): pid=27052 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 743.165957][ T29] audit: type=1800 audit(1593082008.008:877): pid=27052 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x9}}}], 0x1fee00) 10:46:48 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x3) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4000000000010046) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xab7359ff9f429839, 0x110, r2, 0xd0b35000) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002004000000000020000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r6, 0x3}, &(0x7f00000000c0)=0x8) 10:46:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 743.334943][ T29] audit: type=1800 audit(1593082008.208:878): pid=27066 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:48 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x23) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket(0xb, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x5}, &(0x7f00000000c0)=0x8) sendfile(r2, r0, 0x0, 0x4000000000010046) 10:46:48 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x40000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0xd}}}], 0x1fee00) 10:46:48 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000200)="e2bde47282e3c6de328257562a09dde422f4e65983d6648f7e09bc7fefd8441f65f10f4e0ffe4601fcb9ca1eaffdce0e71c88d37828aaace5327b2e709fde612faa70278170ce5564a0de7a1b03981c489496419c227e1c00f241b9534f76bb35406dbe305d88f9b1814c7a52ad24be816ff76dfbcbd358104cac6563106448b0ec951739f94621bb623d6b4d2dcb454dc923412951776d474c1eb0914e5889140274751c39409bc709c1960b366f0011f1f6194f13603325aae20ba06a79a07af5916948265abba74") io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r5, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000100)) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f00000000c0)=0x9) 10:46:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 743.633246][ T29] audit: type=1800 audit(1593082008.508:879): pid=27084 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:48 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x0, @capture={0x0, 0x1, {0x2, 0x9}, 0xf0, 0x1}}) r1 = socket(0x10, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4000000000010046) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x144) 10:46:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0xe}}}], 0x1fee00) [ 743.709777][ T29] audit: type=1800 audit(1593082008.548:880): pid=27084 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:48 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x10}}}], 0x1fee00) 10:46:48 executing program 0 (fault-call:3 fault-nth:0): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:48 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000180)) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x400100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000200)={0x0, [[0x80, 0x9, 0x6, 0x5, 0x5, 0x55, 0x3, 0x1], [0x5, 0xfff, 0x0, 0x2, 0x81, 0xffffffc0, 0x20, 0x9], [0xe272, 0x8, 0x2, 0x20, 0x80, 0x9, 0x4, 0xd33]], [], [{0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x7fff, 0x0, 0x1}, {0x6e, 0xfffffffb, 0x1, 0x1}, {0x1f, 0x9, 0x1}, {0x1, 0xff, 0x0, 0x1, 0x1, 0x1}, {0xbbf, 0x4d9, 0x0, 0x0, 0x1, 0x1}, {0x466, 0x9, 0x0, 0x1}, {0x0, 0x81, 0x1, 0x0, 0x1}, {0x1ff, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x101, 0xf5, 0x1, 0x1, 0x1}, {0x7ff, 0x18bd, 0x1, 0x1, 0x1, 0x1}], [], 0x7fff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000100)={0x1f, 0xffffffff, 0x80000000, 0x7fffffff, 0x1a, "94a9cf93ef4dbfbfed94473750597cec3c15db"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) ioctl$FICLONE(r2, 0x40049409, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r7}]) [ 744.060787][T27105] FAULT_INJECTION: forcing a failure. [ 744.060787][T27105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 744.126467][T27105] CPU: 0 PID: 27105 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 744.136258][T27105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.148448][T27105] Call Trace: [ 744.152120][T27105] dump_stack+0x188/0x20d [ 744.156692][T27105] should_fail.cold+0x5/0xa [ 744.161372][T27105] ? fault_create_debugfs_attr+0x140/0x140 [ 744.167300][T27105] ? __lock_acquire+0xc6c/0x48a0 [ 744.172376][T27105] __alloc_pages_nodemask+0x17a/0x810 [ 744.177910][T27105] ? debug_smp_processor_id+0x2f/0x185 [ 744.183624][T27105] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 744.190508][T27105] ? __bfs+0x520/0x520 [ 744.194700][T27105] ? debug_smp_processor_id+0x2f/0x185 [ 744.200278][T27105] alloc_pages_vma+0xd9/0x600 [ 744.205066][T27105] shmem_alloc_page+0xb0/0x170 [ 744.209956][T27105] ? shmem_swapin+0x1a0/0x1a0 [ 744.215484][T27105] ? percpu_counter_add_batch+0x123/0x180 [ 744.221352][T27105] ? __vm_enough_memory+0x10f/0x280 [ 744.226762][T27105] shmem_alloc_and_acct_page+0x160/0x980 [ 744.232521][T27105] shmem_getpage_gfp+0x514/0x24f0 [ 744.237611][T27105] ? shmem_unused_huge_scan+0xb0/0xb0 [ 744.243028][T27105] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 744.249243][T27105] shmem_write_begin+0x102/0x1e0 [ 744.254610][T27105] generic_perform_write+0x20a/0x4e0 [ 744.260071][T27105] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 744.270639][T27105] ? update_time+0xc0/0xc0 [ 744.276210][T27105] ? down_write+0xdb/0x150 [ 744.280833][T27105] __generic_file_write_iter+0x24c/0x610 [ 744.286541][T27105] generic_file_write_iter+0x3f3/0x630 [ 744.293065][T27105] ? __generic_file_write_iter+0x610/0x610 [ 744.299202][T27105] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 744.305854][T27105] ? find_held_lock+0x2d/0x110 [ 744.310910][T27105] ? __fget_files+0x30d/0x500 [ 744.315825][T27105] new_sync_write+0x426/0x650 [ 744.320544][T27105] ? new_sync_read+0x6d0/0x6d0 [ 744.326148][T27105] ? debug_smp_processor_id+0x2f/0x185 [ 744.331648][T27105] ? rcu_read_lock_any_held+0xcd/0xf0 [ 744.337056][T27105] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 744.342651][T27105] __vfs_write+0xc9/0x100 [ 744.347392][T27105] vfs_write+0x268/0x5d0 [ 744.351706][T27105] ksys_write+0x12d/0x250 [ 744.356283][T27105] ? __ia32_sys_read+0xb0/0xb0 [ 744.361551][T27105] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 744.367698][T27105] ? do_syscall_64+0x21/0x7d0 [ 744.373378][T27105] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 744.379783][T27105] do_syscall_64+0xf6/0x7d0 [ 744.384334][T27105] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 744.390434][T27105] RIP: 0033:0x45ca59 [ 744.394450][T27105] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 744.414364][T27105] RSP: 002b:00007f38a448ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 744.423391][T27105] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 744.431573][T27105] RDX: 000000000000000b RSI: 00000000200000c0 RDI: 0000000000000003 [ 744.439658][T27105] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 744.448385][T27105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 744.457079][T27105] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f38a448f6d4 10:46:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) 10:46:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x11}}}], 0x1fee00) 10:46:49 executing program 1: syz_open_dev$hidraw(&(0x7f0000000440)='/dev/hidraw#\x00', 0x0, 0x2200) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x201, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0xef5, 0x34, "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", 0x2, 0xc9, 0x6, 0x40, 0x65, 0x6, 0x7f}, r2}}, 0x120) r3 = syz_open_dev$hidraw(0x0, 0xffffffff, 0x400040) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/140, 0x8c) ioctl$HIDIOCAPPLICATION(r3, 0x40305828, 0x4001e0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000400)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2, 0xffffffffffffffff}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x4, {0x1, 0x6b5, 0x5, 0x3f}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x6, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4, 0x3, 0x8}, 0xc) 10:46:49 executing program 0 (fault-call:3 fault-nth:1): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:49 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400400200) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) ftruncate(r4, 0x66) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x12}}}], 0x1fee00) 10:46:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:49 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00'/11, @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0x2, 0x1, 0x3ff, 0x8000}) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r6, 0x1, 0xffff, 0x9}, 0x10) 10:46:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xfdef) 10:46:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x21}}}], 0x1fee00) 10:46:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:49 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000024000b0f000000000000000000000000c17444e068095fdf7a81fd1b3eff942c082e04bcf849fa7095091ecd4a06cf17f8323d83532a27ce38cf06f387e05aefb01ca3e21aba071e92ebcad6d6799b54552cd14f78b640460e88d71e56fbb1c718b55d4b968b39292832b120db898638", @ANYRES32=r5, @ANYBLOB="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"], 0x58}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0xf05a, 0xa, 0x5, 0x20, 0xffffffffffffffff, 0x400, [], r5, r1, 0x4, 0x4, 0x5}, 0x40) dup2(r7, r3) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000200)={0x80, [[0x8, 0xffff3d37, 0xf4, 0x7, 0xfd6, 0x1003, 0x5, 0x3], [0x6, 0x80, 0x0, 0x1522, 0x0, 0x0, 0x1ff, 0x100], [0x0, 0x9, 0x1, 0x80000000, 0x7, 0x200, 0x9, 0x80000000]], [], [{0x7, 0xffff, 0x1, 0x1, 0x0, 0x1}, {0x80, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x9, 0xc12, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x1f, 0x3f80000, 0x0, 0x1, 0x1, 0x1}, {0x107200, 0xfffffffa, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x1ff, 0x7fff, 0x0, 0x1, 0x1}, {0xffff, 0x5, 0x1, 0x1, 0x1, 0x1}], [], 0x5f}) [ 745.170025][T27157] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 745.273751][T27157] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 10:46:50 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x2200) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4180, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x12}, @empty}, 0xc) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r1, 0x40305828, 0x4001e0) 10:46:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:46:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x85}}}], 0x1fee00) 10:46:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:50 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240)='/dev/ptmx\x00', 0x10800, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1010, 0x3ed, 0x20, 0x70bd2d, 0x25dfdbfb, "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", ["", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xfffffdef) 10:46:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:50 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x6, 0x2d}, @window={0x3, 0x7fff, 0xffff}, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x5) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xfffffffffffffdef) 10:46:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x86}}}], 0x1fee00) 10:46:50 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x901a80, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c653020237d202f6465762f66756c6c000ad8d2694173ad477684e66bd2dae349f331da2a3184bcbff076ef372836cf004d2aa1f9abefb0deda0a8ad13f5121f1943f2e81729cd599d5d1b41c23091eb88ee7ba3415c67e5f36df95a6d5732e82c6548b12281ffe58f5a8f93c2b81c0e25f0e0f3d1c81097e497ccc2b81a2c1feb088ae0926b2d7fc872b27812e3a6099747e8aacceebd759ebd382d06e85ce10c6ff635467936e38ef6f014b73809ee6"], 0xb9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d10, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:51 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x8, 0x2200) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r0, 0x40305828, 0x4001e0) 10:46:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='# ./file0\n'], 0xb) 10:46:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x87}}}], 0x1fee00) 10:46:51 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) io_submit(r2, 0x3, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe18, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x5, r5, &(0x7f0000000200)="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", 0x1000, 0x2, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3, r6, &(0x7f0000001200)="0acce818feb9287ca0570e3b6362abfd2573c1f4748c937456117ef0edf0b6f47706bb1c5af9416465d46f6aef9c1d9c9923fc715475ded2981b9852f08703f8d29c5d400f46c36b4846aab8b8191a2d50038c7dfa575a1e1f7ba32f736a768cbc3181f8dfc2256493fc1d374953335e3e5679c087", 0x75, 0x101, 0x0, 0x3, r7}]) 10:46:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) socketpair(0x25, 0xa, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000180)=0x1) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x11, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r4, 0xfac}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r5, 0x3}, 0x8) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:51 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) r3 = dup3(r1, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000540)={{0x1, 0x6, 0x9, 0x9, '\x00', 0x8}, 0x1, [0x2, 0x7, 0x8001, 0xfffffffffffffffa, 0x4, 0x2, 0x2, 0x0, 0x9, 0x1, 0x8000, 0x9, 0xfff, 0x7fffffff, 0x6, 0x3, 0x92, 0x6, 0x10000, 0x0, 0x8, 0x4, 0x0, 0x6, 0x720e892a, 0x401, 0x9, 0x9, 0xfb1a, 0x200, 0xdad, 0x10000, 0xff, 0x0, 0x80000000, 0x8, 0x4, 0x6, 0x8, 0xd0, 0x9, 0x4, 0xa106, 0x59, 0x5, 0x6, 0x0, 0xc1, 0x1, 0x0, 0x401, 0x8, 0x4, 0x800, 0xc4, 0x3, 0xffffffff00000001, 0xf8f2, 0x80000001, 0x400, 0x4, 0x7, 0x0, 0x120, 0xfff, 0x8001, 0x4, 0x2f, 0x7, 0x40, 0xfff, 0x80, 0x10000000000, 0xffffffff, 0xd060, 0x9, 0x1, 0x7, 0x10c800000000, 0x3ff, 0x5, 0x200, 0x400, 0xff, 0x3, 0x200, 0x7fff, 0x5, 0x10001, 0x9, 0x0, 0x2, 0x5, 0xf72, 0x7fffffff, 0x8, 0x3, 0x40, 0xfff, 0x9, 0x1, 0x4, 0x9, 0x3, 0x9, 0x7fff, 0x3, 0x2739, 0x2, 0x9, 0x401, 0x3, 0x3ff, 0x41f6f57f, 0x2, 0x8, 0x3, 0xff, 0xffffffffffffffa1, 0xffffffff00000001, 0x9, 0x5, 0x5, 0xb9, 0x4, 0x1ff, 0x7, 0x10001]}) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000180)='silent\x00', 0x0, 0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) waitid$P_PIDFD(0x3, r7, &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)) 10:46:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x88}}}], 0x1fee00) 10:46:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xe2fad26986a6d02, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x880}, 0x4000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x11, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x3, 0x2, 0x4, 0x200, 0x0, 0x5, 0x5, {r5, @in6={{0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x2, 0x0, 0x7, 0x1f, 0x9}}, &(0x7f0000000080)=0xb0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0xffffffff, 0x0) [ 746.739586][T27233] binder: 27227:27233 ioctl c4c85512 20000540 returned -22 10:46:51 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x2, 0x2a00) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x80000) ioctl$HIDIOCAPPLICATION(r0, 0x40305828, 0x4001e0) 10:46:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x89}}}], 0x1fee00) 10:46:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r4, 0x7ff}, &(0x7f0000000040)=0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file1', [], 0xa, "aee11f90371653046a8dd61e63f05a3cd9ee59d2aabb230c56f7492c0f56310f4edf5ba17709b50f68ab427a1439c5b122162ca930b2850c31a2de3ba5096e85718c4ccb82deb0467a58af0387869ef6832e9aad263bd5a6ee9b4d8d55455f9a060f20b085278ef500919ea574949df4ae22e75a53699d159fb651d7f44c54ceb2582de93468568589e8670f0626deaa1f7e3c1732991c765eba5eea7f521869c8dffe4e83d599590587435e405d7962d3bd6ab917a6b3875a5882265539de52e1c56ed3761cf6ba8f03dd53021f01eeccd8296de51fb3bad2986fc26a6e457aa597209f657c271755c41c5aa131"}, 0x1d) 10:46:51 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000001c0)={0x3, 0x100, 0x900, 0x2, 0x400, 0x80}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x10140, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000300)={'\x00', 0x1f}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x1) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) [ 747.064535][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 747.064549][ T29] audit: type=1800 audit(1593082011.938:899): pid=27249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x8a}}}], 0x1fee00) 10:46:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 747.177776][ T29] audit: type=1800 audit(1593082011.978:900): pid=27249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 747.327880][ T29] audit: type=1800 audit(1593082012.198:901): pid=27265 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 747.410499][ T29] audit: type=1800 audit(1593082012.258:902): pid=27265 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x8b}}}], 0x1fee00) 10:46:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 747.583544][ T29] audit: type=1800 audit(1593082012.458:903): pid=27274 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:52 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24174d2e66187af36dfe2451f75f43db6f", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80900010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc1) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000240), 0x4) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x8c}}}], 0x1fee00) [ 747.797004][ T29] audit: type=1800 audit(1593082012.668:904): pid=27282 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 747.871074][ T29] audit: type=1800 audit(1593082012.718:905): pid=27282 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:53 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) kcmp(r1, r2, 0x0, r3, r0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) dup2(r4, r5) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:53 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0xc00441, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000001c0)="1fc4b3dbce5ad3620cd1a7d9e867e7a43d7d47d06447f757ec63572fe68691a287fd7a301a94cbf25ab33bc85159df0787c01412f09df62b9769e7ea7d329ca9838492343f217450aad9d0ea0ed6b0ce2f3c8daebbd02193d923f9d3795013c1f19b6ec4b162341ae31bcb918135a1e429c1b35baafa23e71499fed2a14304a2523c39b0991d53387238acdaee4911ee1a4e8cc3925a7489a1f82259468937c220280602ac7f5502f36cde36602f92d8f014600e3fca125bdf3d9f7991c84eb150f427d99752cff1f3ccdc312ffde9268ac1"}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6fcb7ccac5f6693491", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:53 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x2200) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x400000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$HIDIOCAPPLICATION(r3, 0x40305828, 0x4001e0) 10:46:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x8d}}}], 0x1fee00) 10:46:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 748.336207][ T29] audit: type=1800 audit(1593082013.198:906): pid=27299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:53 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24787b647b4ad2b128c9fcfa644229e1ffff2d0019034643db6f5cc79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x8e}}}], 0x1fee00) [ 748.436448][ T29] audit: type=1800 audit(1593082013.258:907): pid=27299 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 748.638872][ T29] audit: type=1800 audit(1593082013.508:908): pid=27312 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0xc1}}}], 0x1fee00) 10:46:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:46:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x2}}}], 0x1fee00) 10:46:54 executing program 0: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r3 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r3, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0/file0\x00', 0x1000, 0x200, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)="8d5e9a8844a9bbe8598aae8e447d059e79fba0a64815f198864d3f7ec7fed8f450d55e66fe29188f84947b25775cb1c314ab5dc4f2b1af7948bef575821669a4b4", 0x41}, {&(0x7f0000000180)="28031a8b0f85a418d6c051d6506e99c0c6d9cf68ac315fa5b089143ae3374692a1", 0x21}, {&(0x7f00000001c0)="a0f04edf144307d41e8a7102915dbf39ffede6a6c29d96ef2b38aa46ce96f5915071398ace82556efe4494636436f1c18992706cf5257f586a81093ff372595aaa36717d5c8cbcf0b5998a7ae5e9c540d181f4bff1755c172b5325c7dab7e94e9340be53ec613cbb626fbb56bf6580f121490375e9229b7fca5370a33c3a68f1a6e7f2", 0x83}, {&(0x7f0000000280)="89b72dccf33792223c1bfc6128e5e7c16f2da9e5cfd0ed389381b1190bf65f3848ee0007262a7a98386cc04ee35b89fcc41eddcdeac16f3d7b13eb13a5eebb472b5f40a1e01462d7c677cc4b93ee6b4b09f1509753f1d4327bb4f35a2fdbcd809520d9d4e31da1373635a29b78dafeb98fbf3c66769a4b0e3a4949b634abbefc7d9678156f3a3d8da2d70394b3658d4d5dd69dd04c00c1d26342e53d40ce4b091ce7dd5167d7db72bd69376cb4e7a9", 0xaf}], 0x4, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40041}, 0x20000050) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:54 executing program 5: clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r4, 0x0, 0x0, 0x0, r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000001c0)='/dev/full\x00', r5}, 0x30) sendfile(0xffffffffffffffff, r6, &(0x7f0000000240)=0x40, 0x800) finit_module(r1, &(0x7f00000000c0), 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000100)) io_setup(0x6, &(0x7f0000000140)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:54 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x2200) syz_open_dev$hidraw(0x0, 0xda, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r0, 0x40305828, 0x4001e0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) 10:46:54 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x800, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32, @ANYRES16=r4], 0x2}}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x3}}}], 0x1fee00) 10:46:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000140)=0x1) socket$nl_audit(0x10, 0x3, 0x9) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)="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", 0xfd, 0xc004, &(0x7f00000002c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000180)={0x20, 0x0, 0x8, {0x0, 0x1a5ef01a0dcca451}}, 0x20) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x301, 0x0, 0x0, {0xe, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xb) 10:46:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x4}}}], 0x1fee00) 10:46:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x9}}}], 0x1fee00) 10:46:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0xd}}}], 0x1fee00) 10:46:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:56 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x2200) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) clone(0xc00, &(0x7f0000000040)="2c4dd192dd3865f08c4f366c412fa9c6efe19ff38f26f582d983c62c0d2cc3504a02532a0a7b69b43edac5f3db3a30d671628ba7c43e4792fab6cb8eed8f1c2854880f9af6043ca42b4b61a88741238aeda03f67d08278606516e7bf09762ae8e91af9dc0810bd8b616881c4f24cca9b2537d1c0c5c894c484d316532f474959b7f00fa5b79934fc8bb120", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="093e6a4c34240af03e0d0d612f35c0d620") ioctl$HIDIOCAPPLICATION(r0, 0x40305828, 0x4001e0) 10:46:56 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:56 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0xe}}}], 0x1fee00) 10:46:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:56 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYRES16=r5, @ANYBLOB="000000000000060000000200000006000b002600000008000700ac1e000108000800e000"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x5c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/full\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x59}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10:46:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 752.134553][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 752.134567][ T29] audit: type=1800 audit(1593082017.009:924): pid=27399 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:57 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x4048050) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) [ 752.218875][ T29] audit: type=1800 audit(1593082017.049:925): pid=27399 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x10}}}], 0x1fee00) 10:46:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:57 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="410776acfe2e5b5b1be365c0fb6e87aae7e894853893985840108b1c16bb89c090dd9a76eeafa2199646723546ca918db397f154f3e195c0c87637a5ef4328e787980b001c63b3d4ff60692e4417c5b46483b949edc09d280ff17e8c55e32a306b4cdd4ee41311964f6170e1975efd379750eaa2de2fd78411aa3100e5293b87282f4e0a447188018657819ac9cb59c19a64488da9e736eb394540961eac4d70af9b06d5a43cf787597c68f439b360b47930500a2306a08b11c45d1938291f8ac8715a616c9820cd6a89d46618600d638e9d43b7b28fe9d5", @ANYRESOCT], 0x5a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="010c0000569418318b79edf5962ef08de0046e8af7be8f6ae509973319f044828055711c906e9d073db084072eb82cbe89c898533a8eb7b1d69f5c458b120511dbbeb9115af4e4ce36ebe5e6b1f04e5056db3fbe29df45ce0097f4815e6fd1aeb10ae0828b3e56cfe586fa4d4b12119c441896f890e46fc6b659469c562d0035863cb84ee53076cfa4d8b01964ae549cfd39cc8c3c0878d59b78c74b50dfc733e419cdaadbd12bf49bd34112670423f88880e7ebced5085e04b9d1cdda619acb9dc443904fbcd99214a718100f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x9, 0x2, 0x1}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f00000000c0)=0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) [ 752.407838][ T29] audit: type=1800 audit(1593082017.279:926): pid=27411 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x11}}}], 0x1fee00) [ 752.470722][ T29] audit: type=1800 audit(1593082017.309:927): pid=27411 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 752.648115][ T29] audit: type=1800 audit(1593082017.519:928): pid=27423 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 752.707004][ T29] audit: type=1800 audit(1593082017.559:929): pid=27423 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:57 executing program 1: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x400000000, 0x2200) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r0, 0x40305828, 0x4001e0) 10:46:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x12}}}], 0x1fee00) 10:46:57 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@mcast1, 0x73}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) [ 753.144483][ T29] audit: type=1800 audit(1593082018.019:930): pid=27437 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 753.211791][ T29] audit: type=1800 audit(1593082018.069:931): pid=27437 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x21}}}], 0x1fee00) 10:46:58 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) close(r0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:58 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x80010, 0xffffffffffffffff, 0x20000000) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000080)) r3 = socket$inet(0x10, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX=r0], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0), 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8001, 0x9, 0x200, r6}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r7, 0x3, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="5276d627d758961270c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0xffffffff, 0x0) 10:46:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 753.422386][ T29] audit: type=1800 audit(1593082018.299:932): pid=27451 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:46:58 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x85}}}], 0x1fee00) 10:46:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 753.514833][ T29] audit: type=1800 audit(1593082018.329:933): pid=27451 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:46:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:58 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x86}}}], 0x1fee00) 10:46:58 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:46:58 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xd350, 0x4001c0) bind$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 10:46:58 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) ioctl$FICLONE(r1, 0x40049409, r2) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:59 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32=r1], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x450002, 0x0) read$snddsp(r4, &(0x7f0000000140)=""/26, 0x1a) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) write$binfmt_script(r3, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:46:59 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0xff, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:46:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@remote, r2}, 0x14) r4 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:46:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x87}}}], 0x1fee00) 10:46:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x88}}}], 0x1fee00) 10:46:59 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds'}, {0x20, '-:.(*'}, {0x20, '#! '}, {0x20, 'y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds'}]}, 0x4d) 10:46:59 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:46:59 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101400, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x10012, r4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={r2}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x8, 0x8e6cd7347968d317, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044841}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r7, 0x0, 0x0, 0x1, 0x0, 0x1}]) 10:46:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:46:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x89}}}], 0x1fee00) 10:47:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x8a}}}], 0x1fee00) 10:47:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a1899c905794f50623b4b0c63c2548f1b3fb0e94e4da27b7bcae1da06fad8d7df77ef387f60f56a491384e60f4609eb8fa18ac15f419b3f2a77d31bd16e0cf7adf050e06cab0182a1508185e5292a3d11694036e6e9c4c1ee5bf02a4bfa4aed1aac9654dc4b43ddcd1f9484bf4f6b768cdba992f47eaf1b094c492a6ef8ae55f36487db3232e65fb317d8f3794a4a264174f7147d651c996820a0c8ae58763cf2f92dbdb0fe7def36d03965fe7810f215c529703f517a6cc768ab0ae89ba299c5dcd61aa30b7890ffb6feb081dfc78e"], 0xb) 10:47:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:00 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:00 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="7df700008c750b8d08a5f2020000"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x190, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffb4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:00 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffef, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRESHEX], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000005c0)={{0x1f}, {0x3, 0x3f}, 0xff, 0x4, 0xfd}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000580)={0x0, 0x1, [{r4, 0x0, 0xfffffffff0000000, 0x8000}]}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="93ff0000000000000000ffffffb8f400b51e86", @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf250f00000008004b000300000030005a802c00010014000300030005fc030000015500008002000700140003000001ff0303000800efc401000100080008000d000200000058030e00f1ed15e9bd794a26994a8e221121745587b0db62dfd95ac2cf2ef7d5acc4a09032cf35dd46e0de390004ecaf29d2b8f47c58b890c76354ed9c986b0331d456c0944c751c87ff6718ac672e23b7c8fe234d448f119dd2f244b6fe49d3f8e07c6ec4dd1d462e7079af173329bc1a271a11195753abf49ed221c28222d7ae97f4b950ac0f061865ab7910a12ded3ca7b60d896e13a0d44bb6f6357aaf3dbb91d0aa1063574ee2b3ba15f925133bd242aee3010c5ae680dcfe44b2665491dd2dcdd69be6ed328668d856a4f2383723aedecee3efbc1a8fa156dac7e7e8cd7a22f4bdd2809abf39cc24e83520a397b351cd2eb3369dcc6ce6b66b5fb2d6eb738b8e565c33975ff10c4bc1ab49b43b88a9eff3e937f8fb90d8cedfe4dc7972fcf2b24d0b967f882e10aa8bac1378eea5221878c8685cf27a35cdc0bfabe9f0fe7eee193c5d16169a647ba38d51b8e9443c7fb9345a7ef86b86adf351cd467a45a0e4e4a165175518dc718bfb4015c655bbf1e367cf33381653427e004cfc9aa60a926fe871fb707d4bc9828782e031562ac4a48f0bb733b2fb75dedbbbfc5c9127b39a5337aa6ea1bbf3fb1c626326e8a8476eb61d5cb71d8c416e2afb332998b4572ba1adafbbe226c833077e8cb2d8abe78bb09cc5e870a68d93f1017cc978a6ce63edf0ee9349aa52bbe9ea1ac61620eefa3ce4241c5919d454f8cdffb49cd08d501e1298581de0c0c99bb8927981bb14a2b5fcee6a5c32cb163ad54f1bd875879a52080e62e0f3bc73a5a2348843620080ee44865d9307b56d81a91f9b24f1d79bbaa5298d96884b3ee8f1ffc925f42783528d926e13b6b91037c564706d732f70a649433b72b6ad473edfef589cb9f56b957dc8f62f739f41baf315c28bf54b23b39cac7a18f48d4283ecfb266d5eff0fc8a101c3d4d238651bf2851105aceb58f004273e331913214509deb3258f4b01dfe249474193ffaaf966355c0664170c4bd3638a28963c58a154b74e51b2c67182f458a35ab5488bb62a553a49cc643837c0a2dd4e1b1f9e341feeb8702eb357d20091c3dfffa087359828d658e6cafe5e933306d0132fcd790b09d1f64bb38e5c78f918341c24732ff0496fa74f91af88a22e74d234896f08730c73cab7436a8a0e229d0436ce845b8d6faeaa381fd3018904c029b8efeb8d2540d2ecf11f8bd2577295"], 0x3ac}, 0x1, 0x0, 0x0, 0x220440c4}, 0x2000c005) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x8b}}}], 0x1fee00) 10:47:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80040, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x7ee0, 0x4) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:00 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) accept$alg(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x8c}}}], 0x1fee00) 10:47:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='(!\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file1\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x3) 10:47:00 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:00 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x8d}}}], 0x1fee00) 10:47:00 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/107, 0x6b}], 0xa}, 0x40) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x9c) 10:47:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x8e}}}], 0x1fee00) 10:47:01 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x181140, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000000c0)={0xc, 0x3, 0xffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={r6, 0x6, 0x3}, &(0x7f0000000400)=0x8) r7 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000500)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) splice(r1, 0x0, r7, 0x0, 0x80000000000, 0x0) 10:47:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0xc1}}}], 0x1fee00) 10:47:01 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = dup2(r5, 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xcc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r9 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_submit(r2, 0x0, &(0x7f0000000040)) 10:47:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x11000) 10:47:01 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) recvfrom$inet6(r3, &(0x7f0000000200)=""/20, 0x14, 0x40010061, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa1, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000100)=0x52a) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2001, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:01 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x20000) 10:47:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:01 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = msgget(0x2, 0x240) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, &(0x7f0000000100)={0x0, ""/173}, 0xb5, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\''}, {}]}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 10:47:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x40000) 10:47:01 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x2}}, 0x4084) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:01 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x12\x95^\xdfT\x06b\xc5\x8bu\xe3\x0e\x00'/27, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 757.148900][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 757.148915][ T29] audit: type=1800 audit(1593082022.009:958): pid=27642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:02 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000002c0)={0x9b0000, 0xffff7fff, 0x286a, r1, 0x0, &(0x7f0000000280)={0x9909d5, 0x10001, [], @p_u32=&(0x7f0000000240)=0x7}}) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x3, 0x7}) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000340)=0xc00000) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000200)={0xfc1ffff, 0x6, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x81, [], @value64=0x101}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e21, 0x80000000, @mcast1, 0x75b}}}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x100000) [ 757.297898][ T29] audit: type=1800 audit(1593082022.069:959): pid=27642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:02 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x81, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000009010800000000000000000300000a0c00048008000100fffff7ff0900010073797a31e66c75014efbbbbb000000080900010073797a31000000000800058008000140000004000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000002fc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x140b, 0x8, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d1}, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x10, 0x800, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7df700dbffff5158000010000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0xcc, r6, 0x1, 0x7, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ae2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20}, 0x810) r7 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r7, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) r8 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r8, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x29a4, 0xa, 0x3, 0x101, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x7}, [@nested={0x107d, 0x8, 0x0, 0x1, [@generic="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", @typed={0x8, 0x28, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x10001}, @generic="4e2f689d8252ab37d2c7fae8b96cdaba6d8489b00d4313bcba7a11084268cfd3651af8ea888790c561cba7c04d3f8d21bd51be3556efb45a0d1d59724bd3ea89b68e6f422eadd8ccb5b5b049d63c1b37d7720149eaf997494c6a322d33881c1aa5623a9b28"]}, @nested={0x3a5, 0x5c, 0x0, 0x1, [@typed={0xf5, 0x65, 0x0, 0x0, @binary="433bffae1f9c1c50b8ba32b4d1f0053374913f4ba812afb1486e176f15c78cd77edd6a403a628b778e903c4d659e98f2a54aeecbc743ec3dac2f84b74376a8979e69e49bfc501f6138c7aefb6fad73e3f39ade299b4e9383d2619a88a9b7f181badabf046dab6525deb3209b836b77fb967498ae5e1594d854ddf8ee7cef7099a731904753ff8a760d3c8b0e67ee3e7348582b03593c6fa623e4d1c3e779952664b1c1e3c6299c0bccda852e581cfaae6545c9ee1c8d9c19afd4acb148f0e87b82c3ce48ddee9148fc33db7e8468f70de7e9dc6d69f0ec64f4872cd71594d07c5a898b05a11032726a53f158dbde838166"}, @generic="01f98c89f2b2e6a0846202de680d9f91e8872a1fb7d7c3628622c34a46909e3a6d4d54655f5a6844af5d60c7bd1d47a4930fc53930893bfeb384be1f40a3eb064a98b830440a6db583859c722e6e6643eccea5358b6b0442ae31308699507d9fe19f78c23384d7bf0626d35f6279fd41ee9661aeb8ff3cbe011a8fea0f51289697e305bb199e52ff118c5bc139588519169c4864aa2d19beb6e023ac9b52d36f1743f63443", @generic="215504cd396eb7a70e4c55f82ade57ea3555e6f7aa4343cef78619916b1db90f86a7194b7dec3a2cb3bcd596baf7450dd341e36f913b7bf47bba67ff4635a2aad2733518450aeb42979bc74f27c0ce01ab37c80e15b6ae53462f25cd02601e475255cb", @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x1}, @generic="52ba89bf4b1239020a15a831a45fe634d3c90707403bdd5c2f6b5ebdc31acd29215adcccb310fae95a9e1c3edfa36ee79d545262c37c67acaeb3cafef685ea30dea6366cce589bd22d9424890a3498651e077428ae8a5caed1c47f8c133cdf84cf2472dca02528205320b73745a55b7b26887d45c2c54520ffa720d6b15d20c5bea8ec7234a8dff1f2a3f05e4d57bb342e6887023b7a70e7dda2e2d0d9a51015ea6555a869acaba7b515d695b4a6fb3fc7aa9280128191b4c412aa67deb404d12ac391c5f202b8467567347315f22a9e3871817a92667b6d", @generic="55f5665cf9abd43e53ba2020b553251f5acdac981eba923d84b13409730ca0219b7ba8f07368318b2fac8a791e13cce120307e36ed45bbaa75233f9a66da20aa79aefee9723a74d93a7aab8ecfb40b4ae13f29758627315881cead9c83db0d84bcc242a54c50abf4e34a4ba7876385762d84184934776f4470d91bac003187fc683868955f223c4f19bcbd4f96de5bff7d3f97fbffc57310792638dd58655d8e6d", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@empty}]}, @generic="53d420a225767bb065732a1a96a766c9f0d2dc1f9fdddea0d2f334fa253b8eec404cb266c05467d6a74001bc79202fab97aecaf55ef12c681ebfd7b16d7d9600dc35f9ec8960d097956bf6f8d7a7292889debb7398698f8c8a4b4c54a3ee180d4a4139b22071de2ee175c6e39ca6cc6a386e0aa02e04e62e6ebd8b6005a3ac7fab66f17964486f8cf3a3b34e", @nested={0x272, 0xf, 0x0, 0x1, [@generic="ac25e5c7f887f1232c80a9d15cd21429923494f5eb360fc9deb79508f4b48e0daae96862f9e9ed0f82298de0ee008da80d7994f19bee002e8f82131eb716d9b9a1c81f9c682829439054991a7e013c18c3970dc11c59a140c389212238f7819b6d1029b2df23fbf7b23d983e192e7668a2e86f146c4d947bf4e4eea64d36490085e4fdd848220bcf14534c80ade31e69f2dcb278041f98182f11696d0587788bad7b02bc2745f665f271ddcfc99c7fc8dec63f8496595aefcba8bc27eb9079be1def50a025605fa965a3fac599157a3a68329b6037baf99781baf6e8efc7f60692d4dcb48e8d2e26deebc923ceb2", @generic="e3738fb62397689e8263ac67e099bc847f1d41ecbfb3cb3853872c912130f0e41282de72ccc645dd4da15f2581f16ff73fccb3af7d74947b12c0091495d52a8952dadcca2a741dbb0da3abf3bbe2aed88baf813657987552cf1d7af9d7c15367a0b291d7dd0164bd3ce368ce894c1e57ec0d93e84eb2230e7026a5fe467c3d5eafb676028a17df42fee41fa19fa4a3edba31a38bdc9204551091eed8d533b138ee795cfb8472248bd2a2e25e09e39ca98ad8b13d7830113f67efc1d36316e64677bdd165bc", @generic="84dc587b3448e24dc153e6e3a57fe742a0c95e4c620b292391196b37ccc62899377f196576f41a0c5b6795867348e5d7ce6c5da9432fccadd3d6992eaebddabe8db5bf82c0df418b84ba24fd34b99845d47b5036c7b03151f076151993e9dc54170efbc5fab1bc7b2f5ed68161e5d38f1f87547f966020506c05af4f554adeccea1d6037197b049847de3ae26dd7f4c822ff1c103c2a6e", @typed={0x15, 0x34, 0x0, 0x0, @binary="d5070994c66d784c67aa19c8002ee4670d"}, @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x6}]}, @nested={0x1171, 0x75, 0x0, 0x1, [@typed={0x1004, 0x17, 0x0, 0x0, @binary="8c0a2187692e4905b28fd47a578ae28525c8027925ec21e49b22a633b64bf40bdfb8f49a608a27b954ff83f670299cf461b3e7f42fc2f587f29deacabcd5bf34782174cb314717959562910e2169618e429bdb7be6b72dfd84e0e6f7bed46bb51f8b77f6413c72e521cfdc48b090fdde2414b04b9b5c7f5b0188be07ca09517e5823854101fb67e0b086ce20a2909b76783d4e7f4fdda7113f3419ef169096917bf9678e8607761b759df3f52d21933d7e7c28ca960deb13108541e70cd6955d79d675762bcf66fdaaf8afedbfbd2bbe675237d90a3e67293984aa7ffb2ada77e00dde7b86c633c12c52ab1d1e9f92773e8d93a39bad8eb02fb7dd7901a3dbdad40d55a7ac7bd28f02dd203dcd03e2252b015df0a4e42821c605f6742ce962bf8789863e5d8ebbab31b97a92414a3342bd02c665c105886e35925d33ace72b270b40f6e5d94f64942c958aa5fc5f619bc67d77845d201fedc8479b7f887e65e6006727ae1ec91636e0208970cf7011e3e530cadfe5030fd5fb0716540581f5ba12dbab3427f4d8b4a4e4d67f5ab0edf6fe3f66260a6048caecdaaa5f390dc7673da1d786fe68421e055a417556ac1609da60d135fae3b1ba4b424bc7cbc64f42fb583bb57f568facf35110c6a231d4c917111b4af27b052eaedc4aa063d4d7bfa744a74ee7050361daf6ffd9ded1ac3b5cb39dfd03da46c9224ca21723ceefe8c11c5a7dc0fce4a72c335024583b8649b1c8d577a6c98c0eb9707f9c7dcbb66a23b0846ec6acedbce7347e42dcd6022bbfb66eed4c9dc89e5f100b66753a142c5a4edd6adedc5f15c25cb924445c471cc0a549c5c4ac6f93dcdeb30c51caf1eda6e804e0b3a725d17c9cc2f30a6a038baf03e14c9b3faeb158865440bbc47bf09cd9cb2b6a0dbc64d47efe867da176576efad0daf71c7bca518eaf92551ae56518720b976d22f5de2d7de8ccc99b9c0a03191cbe3d2b66c7ffeb52ff49c2613595525712716dc8d28a288afc57c9a47356aba3d612ffb19134b159dbcff3af2cec9c521d46595cb6b57cfcec30ff4a50fdf6c4f62c8f164396f3e5166a74632734c342240579f6bb671541cf39b60c6d64e9e6f08aac10f42d6d1b5cfbed98001f273f01460cc63607695e3e5aa8891ebc5a8a8ead2dd5264192b4796db64de2399e32f4b47f5ff5f00a2d2a0507b152b9edf179176c8c8ecd9fd6bbc820361c29154cf641963c7170fc1c800f34ef1cef03d9a9c5dbc8ecd67211eedd6d2a8b1435423eda56ebe06ad219958aef0639f3623e8c30f37cf1f632b2ab6da9c8829864e0a9295bb1a760dc33abf2b6b6abe28ff768b78c0fbd26c8fd714a2f829d712ac73b88546246e7895c22705ba547665f323d158143c3daa07c907e4d83b74f01e0cacaeab355750b31b38cbdeaad6b52c25d7e8e23489060dc36faf86688f1d47cc25f6fad1c9ed7683bc2817d3d8805f93c07b63442feb2dd0d9588f808c59f9f66471a5804463e33bd8dd0b6b0123b71317d4c3b74135109c2123268316264a97193b08faf1d416c924b1af1aa96d79c35cefa498141922250f9f4ef736f136ab276fc14b8c21dc42ef64f6ae7e5ff8df2bfcda5f5e2ef99994cc69e12cd73729f55b298af2055b5edc5e098ea4183238edba3f44af075388fd09f1b6187d1cd1c6890083e4eb057f708b5c58927e129a45699ee8d8513e88576e4a45d93e770aa0fdc5e8c5ae8bc08dc4dba31a05277637a3605bacd3bc917e6eb4c4121318b9c4ad1e51742d927fa31f4a4f1b120dbd7e745b505e4259d86ce7123022076ea3080736d51c6782ca5d296026aa10e93baeec536ac08f0d7b2fd24b6138fdf176ba9d089be6a89af34d63afc4fb36976b166f9ab8db59f1903b03cfca34d6559b78bd902f0f00f3d39c15d836527265ad500aaf425a20257d607ae42266dd9fba2afc5b6b09783625b070562545c5504f55e86f14126dd79c01c8f4f8a0f2401d3ff8604ac5f402df441d6e45a6d57011fcd2ad9da42d4ce23a412c3d1887377d70e3a98e5551da03e9682f1d54e794be589f51fd5de246b20183ed1ef9f74d86b3a920a5f8aa194f8b9650193616d913586d8c835ff6cd6997506d9cf67e29152ba66166f8de7d15406ed2540a45fbebc8fc7c3dc4af48494a3fa763c5591c9053398ed15e118d18f3d851d059217dfa1bc9031931ac3ea76d45433739468491b0e510c1d356412470da36c1d73c11c2decec94635ee7192d825af14c509433419c1a4f2198e753a5c09bea68f60fc2d746af219250cd46373128e5753aa3e9b945adc792fc0b3e1a5785ebca2c67150358e307b5637490f8e4000d27f4fbbc4b0fb68a377f599b0790d33f61c580567e203afa17fd68024026aa0747bf16c995d05dd9f61bae66193e96bd5aa824a846d257bcda78776e993386f560e9b92bc1e19daee2f3a25362708226b6ef2c679839df88ec4f233ae1be5778ce06d30ce6e81f88e98ab55a9c790df01a528a716cf6afb006e5c676a1f3224fac11727c264c9805118ca2ec8d4a69849e1e7f36209f21267329ca9d4773e2e3b1ed02c1ef7e1a1c8b7cd6cbc6c48f86d4c60cccc452130bd959ff7cf93259e58d4efe5d67fed204d63d85e14b22264ba36c2c6b1b87511f3346356e2217e39d0adee040434bb400e70b7c7218ce34928683ce5dd87f7c5acf82d3bd3c3f0e987baa44d2bfd3e2a2713e12a96732e04fc1906aad2245ba4340d7995d4c438c768cc61f38e157222beb273aa2c49ea9102f6d19ecca40c4827cf973856ec880bc2a33a4c7570b8908535ddad3769f95da52b6eeae8a48d2ded4bf6c6370f2bf0c35daf000671e3d8ce72d7d177cb7a3b2e52608f3da11c1f9cabd59d9feaf3cdf798dc9627fa78f94062485050d24e4f89d265d57061c6c6ee336f8c204cb1b592413f6ea71b3a981b014bdc257ac7575441e7e3848c747501cf7527041cc9d5eedb6575f862b688299c12a5382e758998aed0cbaed2ec1ae4fcbc21a84469863a13435329fb47466014c17c5aba734e92f21be81fcd37c481aabf5f2476d01a827efcde96c298b998f34951acbe0ab2c0b3dc671bfac6746005858402bc1242ca056c4ab493c94dcdc272a3f1ee72ef46c9c89f77f9079b57bb86e72d4ec831e4ad257d3317807577e87388dddf3b44be99148a71f3b123e6bc8eed3b777adbdce4e723abe40d30a5e2e5b73f3433121d2b6316f21a1185589502fbe3e26bfea71fbf09dc337eab81579247217946c96879e361034d6636a0c7e931f39941945e157521f38a3ca4e61868a5a3386f2d148517a8e23513b96d1d44f9f81ae25447c182b6520674f30dad152efea4ebdb7b07727c45635dc6f686038cc46a53604abfc6a33078634d33af1b74f64eecb3782216b56d1c0dae790cbe95e398e8ae5d732e3ad0017ef07c4f177bbb7d6f3d56e34bc923b7f3565f38fb08f4d25c6397a099b2e6f91b13e838639a362520dc798ccc2e0329a5bc72211954c56028438d34ddccc42339161c1f82b8640087e0aa218302f53add2d7da524575cdeb8b2ff52d64087a02dd847d7e71550698c76f4e39fb947f788414e1f88ba7b780b9bee7f1ee12c744cc037dc4f3f45ce736ee588be8badd88ba67b288fe923b975197c92c658e1cbddeb7c8e6510abecf6e6bfbcf05dc670b829e0dceeafa4cf29227ac3951e1ad61dd23c34feccc5625610a6a850b0576e2611aee33aa509e272d36457ad9a76be6c9e294ed6546f02b9dd42b0954704f73f4170a32b4bb1a8047ef4a780bdc097a428afc4e8e410bae04cf03556b2b7447670bff1761b8885434e08cc69342bda402ce261de23377a5bf502787c3885d313f010945a1beeafbb5aefccefe6194a7015d1339d741f48aebb45a91cfd99fbe7bac0db6ea72f342b0a6fa70029c58de47620b6f6d10557917966cbb9f23b5e248deddd5be9c162ac467c512e444d11355613c0b37a98ee575265b71e86ea341f948bceb36c7e1e00681c0af5f1a32e5e038efeb16dc85efe23a2912d385c92ffb4a7fb6ba09816c8c3db96e09c31d3b15e0cc6941dd3e7e1365dddda97383c5b76674f30d2af3150fd2065b22cf3d619b769313a6c2e40abdb5d47c8a0e7ecf50d660270d9eda09717f2b7d288d1319c1569e958de7410c529040c5072f2d4511135f4ced10ef30f280e72eba8c93c47742dd52064c07450be558b48aea789a146a2e5fea29d8adaa6b4d91bbcb0e91057af2c19406adb53237d06725cf226e8e9128fd9810cf7f6fc3e73d3fcff18fc63f9d8472a149e7171fdab6023d1c8d443bf1bbffba351cb3929f08ea0fb46620cc65177920ef23f15d3487f217df2dda7772d1588dac131e4974383d2ba135a2ba40e77277d05feba89af1deb2c804bcba8b3460e3c7111fd7688d1b4e87a7b378c8f00cc0a148dbdb77b403893ca250f6d95810f95ef83dfb56ccf070b750c9352b67e769122a03685eee150058f7c84efe92a6e15936a187e13a0aa7cb5c8618bcb231cb6e49756d4f3159909896b8cf248890d9dad434feca91a6b4910a69d4634b184335513a5d06f234316ff4de667588a2a473357b515f325bf5d0427ca85893a5da557681d574a2020b3e03a910aca77caf86f4a47db0db432e4a64f98ae0b73ea4bfd34e73195269b416599bc656ff3dfaf67ec8a4e56ef9c0e21f5b6b58d4ee7660f56dda1a63904740f4672a1106d6631ba5d2ee2c32e887bee18aeeb14a134c1798c778db4312dde91de1b0712b5965b98005e5189c8e36911067c829f845b65ddfa78c9307b0d031d085914e868d22ea66b0a0ee5bf9d49c91038c0210029edfd31e996d3f3a94b1b0988520612ec84a18acc417bd0947e63830b739146e2cd13c71ca9ab5bfd4d6c7a705cf77bbb337fa862edb59f476ccae7685386666ce58ee3911dc73042a7a4871ddc770750b59452441b829c272920b6a71791c4a87ae31ea50cdea40d9c42118dcd065327fe4c6f6ad539c2f1524005947a53a8fbebcd885e442b80b71745b7858d7cdc72ed4b15435a2d4defc788e9b78185d4b443f026320586f58715af6898aca43fdc7230b60ba6bd52e9fd8466e5aeca60d83194edca25551020af54c73b3ec4a5ae3cb875bafb61a13036cb05d7e35e3cda34cd1a0e09c1bdaaac4d54b588329b37bd2107246947e166537529ceaa8c7a77d46dcc4e427e173d9027709765e5b9daeb1fd1d93d1ab6bdcc9546bd96c92d9ff2835c046b5f670d14ca3f2bceb9af8363df114d957b603477b8a406ff6db375dfc13d6fde3dee231191ca54fde485fc4c695ea90decde3bc7a437e9c45afda87365cad822fcd291a6a5a5969031ffea4bd4fb9cc8bd8910c364a3ad58f0231a0c9593345deac2dc8abddcf7dd035136a93f0d74f76e96d9d7bdd30dba3ef11fd7f0f0e5a28d7054df156f41100bb01be79bb53c352b46529b3d79fe21e701d533ea5e0d45d6de06da281561a0269569477bdcb8d7e997f4d6feed7536b2aee1ab71afb740120ce295d0877b47e72dec3211475854e95dcbdca2040a42c729f13703fea8daa25c557599e7caef17e2bc32219caf017106831bb8c65bac071a7b5467976f8d6e48855faaa04dd04c6f8927f2e1ad8e2442d01e1b46b1cb431505516e47ea8e108863417001b8ef684fe21c4acb3c459ddb27ec31ca8a860e0e73e98e52e57d01861956c13c89efe7378249fe220c540391510539b11937e724bd0e02e1a53814aad68d4de50094c4ab6699b50870f9e"}, @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x6, 0x2c, 0x0, 0x0, @str='*\x00'}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast2}, @generic="51f0011a345233718c83056dfbc9fc559128126dfda20e468a0af4a9e747ae203359c2cb0c4f9d48e01d46b8f8808f11c9b71dc68435cef4a60737b353aa0ae72a3ac31ed0fa5662", @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="051b54733da1282d12e9e8f50557293ac0d2694563200eb7f4bdeff1d62d0cef4567ac2265882b1226f76ebd86b4ebc3569e0145fe8890dba5ccb7b4f5cc920603fe8f983cb57800023bf42ae9d8ec3531", @typed={0x8, 0x3f, 0x0, 0x0, @uid=r8}, @typed={0x99, 0x7f, 0x0, 0x0, @binary="b0b9c38ef82a77ec5212afcfc60fced5ed033000e6cbd54ac7bcde316ff486ce2e56a482d59de65c0d80c9fa87adf3f24fe3113b5f7ad09ca278ddf38b8798ea1036d3e64de00a8a6d76d4e187f3dbacfdb6ed68a5fddfe6defb3cd463e5bcb6347482e585c408749cfa234cab445d80f1a03a787fd01a4472159c95d06d5d2f5c6b5a2f56d701050bfaeb779a9f69be61cd3109d8"}]}, @generic="02c4dbcf08e2877afc2371836962b73bbad48b9d890565a893616b05ccf16c55521a4ba6b3629f15df4540c3a1575e6643ef1b2d2145aa5784b8b87fa8964db22897162cb51bfb0f6ac081411e2397117b0fdb84e72abb0659c4bebe91fd855d540717f38f16bd0b41533720409653c3740adfdf3226059f36467934133d54b96d95ea721d9a57231d0597a5f7bd8256724a522bc9ef5a4ee3522220f7e193f20b98584ebb33bd429d95a674cd058c1b11541ffcf179ce1e5849faf736ccb1482977e0a9928145af6d00ed536212365d8da73b6b5d1dd05a871c0498582d39b8d721f12080fd245bbc658146f5d427bb5997e793"]}, 0x29a4}, 0x1, 0x0, 0x0, 0x8010}, 0x4008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) [ 757.430374][ T29] audit: type=1800 audit(1593082022.289:960): pid=27656 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 757.504436][ T29] audit: type=1800 audit(1593082022.349:961): pid=27656 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:03 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x3}]) 10:47:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:03 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee02) 10:47:03 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x1f4, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4f7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd71d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd23b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb242}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x576f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xfff}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3f, 0x0, 0x20, 0x3e4, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000200)={r8, 0x3}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9d8e0ec22ef918034643db6ff4c79009bf2ffd3b", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f6600006530edfd160965de4b9b98eb789480b7220a31734d7956a8cdea5277b50ea448001f63fe644143ba2eb8da89c3c8588e99c5d778ad638bdb32fb7137c9ff6cb9cb6c3ea6512489f5e13a232bbc54eb67493f42efa5d53eb2d82257122489b5869f76dcb58c190e46e0d6fbefc245c0af78421a33c2c426b8fc695cf268e61b42169514ca7f4f3f2845adef82d45bdacd0c266c22df818a3d5083d4fc7f40179f1157fd720f885620d8a00ace528a42c4d94fcc22c29e2027c680bb313ede8d0504b5b693f3f4087a776f6c79e0f33a23bc90a50ae1c1cf78"], 0xb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x0, r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000680)='.[r\x00', r3}, 0x30) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000700)={0x2, 0x1, 0x0, 0x9, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000100)={0x1, 0x81, 0x400, 0x6, 0x9, 0x81, 0x40000003, 0xcd8, 0x9}) [ 758.817526][ T29] audit: type=1800 audit(1593082023.679:962): pid=27674 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee03) 10:47:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x3}}, 0x18) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0x29) [ 758.888521][ T29] audit: type=1800 audit(1593082023.679:963): pid=27674 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:03 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0288ff10800c0005001a070200060b010702000101"], 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000200)={0x400, 0xfffffffa, 0xee, 0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@rand_addr=0x64010100, @broadcast}, 0xc) bind$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @none}, 0xa) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 759.030768][ T29] audit: type=1800 audit(1593082023.889:964): pid=27688 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 759.076884][ T29] audit: type=1800 audit(1593082023.939:965): pid=27688 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee04) 10:47:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x2748) [ 759.206820][ T29] audit: type=1800 audit(1593082024.069:966): pid=27699 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 759.281715][ T29] audit: type=1800 audit(1593082024.129:967): pid=27699 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:04 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee09) 10:47:04 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000500)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000380)={0x3}) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000500)) io_submit(r3, 0x9, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0xd75, r4, &(0x7f0000000200)="1d2a05d422abb98f27a83cfd0898c1d9479bedec3c80902a0cc5b03213e9d024282bde25807339a1214dd10227d0bc7800a4108a148bac3ba4b85825a2084881fe86e54c2e2904207240983db5f16487a775c4df94ce1948459e58b9a2dbe4019574a2270d9bdf08e53be4b8bcf1c43128a29bf498f25e37d0093de1977a2021f9965bc0caa0ddb496dcdc97ccc78695dbf03591403686876d1404facf89ed8c524750b2ef958f72a4f559", 0xab, 0x15, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1ff, r1, &(0x7f0000000100)="a7df437ea50cba6e7e2ca43491a71909936183b79e661bc301aad8306b36b0b30802524d95c2d0e2519d95ee", 0x2c, 0x5, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="1ff26e96ad02fb567d40f695ca8c9ef0bfeffb01f53d702d754c43365f3454f2ea0b73b21faf9483cc3f64c6e1637452c6bc8c7347e5dea598de0b2727bf164c8ff18926efa6cf47e41329df3dc5a3d0a91bb1260a526c296a5bf434cef6059ba24aa9f7b02ef7e228dd8ee024eed94577026a969c5d95927dbee62493f04fe25e740067a09e49e6dbc78b96952b3164126ffbfcd7d15ea4c8b43217ca2632b42c1be3d250b7f8a3cfafac", 0xab, 0x0, 0x0, 0x0, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xfffd, 0xffffffffffffffff, &(0x7f00000003c0)="7f297bd1c194969f7db1df387a9e26ead7089561583a050f0ac8b75fb8e545b0a580cea8c9a263355ec21bd1597ac7c8173aa8cc94710722b2e52d24170cda4729e31ddf1c81d0c0469023859e982b7f73fca37cec0f7fd38d3f92d65a2fc1ea18fa9a3afb9cf3a53927a05499d8", 0x6e, 0x5, 0x0, 0x2, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000480)="f7166f8bdf53c2b2526e3150c68cb2f3788688472f5e68fec17eeb793e44c2c2a3764fbead1689f3444f5148680ce814b276b177c58fc784d69a101bd796b91dc3585c3ae18e5bfae577e7e2e9fc38c3c5637a05e00225cd0d784f1f7e2704eb331ea925ec6e106b318ce6ce862994092da1a998e5faaf30c8e1d27a27298659c9cca36f0a3aef5e48ed2f3b305817fc365468d205d82de2820d6cffaefbe0b068aff9ca11ed88c5d99af88838bd1dfea539ec38d74d8d80ff8b8ef817736830c66fdb98a2332655d16323aec743c850a49fb697a8b5c5349894d41bcbd97c07289e8c14426b34055d7cab7b3c7106fbaa84", 0xf2, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)="1e30da78103676ec44c58a3d1400e123004922864145c3f58e12fad2a1780cf1eb6cc66cd2702e0b7d85d5281236a39d3ff01349c6747bcaaa43604e785950317f44c66f3e800d13ed8688e225ce404536cca90d97ea4b24bad9fbc15b6dfb0a4e541708ffeb82c3145cde4e943d87734953b49dc072ad", 0x77, 0x0, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x925, r5, &(0x7f0000000680)="9359d6af6e5f", 0x6, 0x80}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x7, r6, &(0x7f0000000700)="77ea35ee090fb13bfec849a5", 0xc, 0x400, 0x0, 0x3, r7}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0x70f2, r8, &(0x7f0000000780)="240dba635b2a77f5ceed25b3dda1c6c98739ef540e32cf1e0312b079d462800b9c5117ac3a81cf510833cd0faee8f9b84d575ca95c6eaae0ddec3bb0e3a1783b51bff5fc00cf9a98af552a6cd525baa20bbdb66793fa9691456ee4c1919ab08bac5bff15ed7120a8d0cabfe8852aea8a106a98b65ec514a884da7549c47574bae6f45898deeae1a18bfbad36a02c8bcd8e71b853f2e353d96ee8bcdb67e7136b81233ac29e54a037460111c9dde7e1ad1e3d08b591266cc37826f3a9b01d3f505d0fcc4ae90a4cd9c9f379e13ece95b46269585c55e39460", 0xd8, 0x0, 0x0, 0x3, r2}]) r9 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) socketpair(0x21, 0x2, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000003bf37f785876f77157e800000084000000020000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x11, &(0x7f00000000c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r7, 0x4e}, &(0x7f0000000140)=0x8) ioctl$FICLONE(r1, 0x40049409, r3) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:04 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair(0x4, 0x6, 0x946, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x1404, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee0d) 10:47:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="a0ffc2ef2f76696c65300a5d2846f270e90691210d3a3c59cd277752fc796b8f4ca1ab40bc42f253"], 0xb) 10:47:04 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee0e) 10:47:05 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000000)={0x9, 0x7, 0xfffffffffffffffa}) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:05 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES16], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f) ioctl$TIOCSCTTY(r7, 0x540e, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000000c0)={0x80000000, 0x32315659, 0x1, @stepwise={0x8, 0x1, 0xad5e, 0x3, 0x2, 0x200}}) 10:47:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee10) 10:47:05 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES32], 0x2}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$cgroup(r2, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000002c0)={0x7, 0x6b, 0x0, 'queue0\x00', 0x81}) ftruncate(r0, 0xffff) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, [], 0x1}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={[], 0x15}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1c1}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @loopback}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4) fcntl$addseals(r0, 0x409, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c, 0x800) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee11) 10:47:05 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [], 0x0}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee12) 10:47:05 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0xfffffffffffffe29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0xfffffffffffffffe) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0xff) close(r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) 10:47:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee21) 10:47:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x10000) 10:47:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [], 0x2}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:05 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:06 executing program 2: socket$isdn(0x22, 0x3, 0x23) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x2}}, 0x40041) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), 0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x81000) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x12}, @local}, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/23, 0x17) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000200)={0x3f, 0x0, 0x9f22}, 0xc) 10:47:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [], 0x3}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee85) 10:47:06 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:06 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:06 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1={0xff, 0x1, [], 0x8}}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee86) 10:47:06 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'btrfs.', '\x00'}) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, ';($^\''}, {0x20, ',\\-\\\x13\xf8'}, {0x20, '\xbd\x80@UUM$S\xff/0#\x1f\xd2L\xe5\x95\x06\xcf\xe9\x87\xa4'}]}, 0x30) 10:47:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:06 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x21, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x1f, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, [], 0x3f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) fcntl$addseals(r0, 0x409, 0xf) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x4, 0x100, 0xe, {0x101, 0x100, 0x1, 0x81}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0xb) 10:47:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee87) 10:47:07 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002e0019034643db6ff0c79079bfa070c956c74e0c4351f03a440737e7283f0b83a4e78f561259640e42c3f0e1a6b0412881ce295e4beab9cb95dece048b2e0f1077361ac06f4f71f3b0b29c12d104ed69a9c4b805ce23888dfa3774a004105253028bad37a47f496d0ff106af28c06de383fe1578a4ee8233e94654d702d3c637c282d3dbeba7470386250e495ad8f9207b1cc271897be4c1070b6c29e89703bdc669491a25d9b1930ecead9239b20ddd78bbe30000000000a52a80cfda4a8bfa9eba1916931e7620142112139cee595128187b5b74e8c08c9fe1ce9ed5244ef8348db23ef6e255db0fc79e79e982b56246dae13e786e9cb94423d912f5a3155e2d568ec0a0c803aa7d9765910000000000000000000000000000000078b9379ad9035a3825d5bb278a020e82d1122aff4622fa96e932490f48ce07c4135aff3e1c86035cc904e748bbb1e201ea180b42d1111d2a5db74900237ff82cd33ad5dd9789d42b386e8d3470efbc2c1660c081379dbe611568553503a944d0012b932a0f44", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:07 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000100)="8d68db8f332eee3902860485364df0fb59e55893f155db11a2e28556541984f23273c15b33491beadf1ada9330a4e61479a364c205301ac1d36f1a6956dc71ca668a758fcb1654bcc149e8f6702f365cedbbfdee9dd6c155751e547956e69f34d2148fc1074042aa35b927e0e40847385bb1cde6b1eb89d7af019921ec5e4f1c07cea6") fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "036c9336fb"}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)=""/81, &(0x7f00000001c0)=0x51) 10:47:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee88) 10:47:07 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee89) 10:47:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 762.461911][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 762.461925][ T29] audit: type=1800 audit(1593082027.329:987): pid=27848 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 762.569707][ T29] audit: type=1800 audit(1593082027.329:988): pid=27848 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:07 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r2, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) r3 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x99d, 0x200000) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32=r5], 0x8c, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000240)=0xbf) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r5, 0x400) 10:47:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee8a) [ 762.684162][ T29] audit: type=1800 audit(1593082027.429:989): pid=27856 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 762.782934][ T29] audit: type=1800 audit(1593082027.469:990): pid=27856 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee8b) 10:47:07 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23045061922b737b58300a"], 0xb) [ 762.857885][ T29] audit: type=1800 audit(1593082027.619:991): pid=27863 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 762.961077][ T29] audit: type=1800 audit(1593082027.639:992): pid=27863 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 [ 763.043047][ T29] audit: type=1800 audit(1593082027.879:993): pid=27874 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 763.075129][ T29] audit: type=1800 audit(1593082027.899:994): pid=27874 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:08 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x48803, 0x40) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYRES16=r3, @ANYBLOB="000000000000060000000200000006000b002600000008000700ac1e000108000800e000"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x2ed7f0659abe28c2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x30}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x80) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:08 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="800000000000000065300a68c24c8dd5aa127ab5ff2423b9af4e2e3439da0dfbc8fef75611a60adc083e57c0b11029194481c0d84bc50f8568b16a98867aeeb2d6a6fb347e2169f642c62dd0b614dd8af3090b5c4cc93a67a519b1ecb686465385e2c61be48d0236e13b7305a0e1d1e1a6df7e78de538e3159"], 0xb) 10:47:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee8c) 10:47:08 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:08 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) splice(r2, 0x0, r1, 0x0, 0xffffffff, 0x5) 10:47:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 763.396588][ T29] audit: type=1800 audit(1593082028.249:995): pid=27888 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:08 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#! '}, {0x20, 'y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds'}, {}, {}, {0x20, '#! '}, {0x20, 'y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcd;'}, {0x20, '#! '}, {0x20, '-'}, {0x20, 'y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcd;'}], 0xa, "94a2e7e2bec73356f2b3c5e461e3211054181c767cc4ecbb3b5abb11d5aa15c4b88a2c219f2eadfd599e3f4728cf2ee3155f35dae7517ec1a090ec1bdfb5be38fdb14aa13a7acae974697bd29bd15f21dc85cc675e42967c703889ef88b20da74a07955c5a20228b9fbf739c8cc96243f053d9ae9d4d214e34e1b160a410ab"}, 0xee) 10:47:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee8d) [ 763.475339][ T29] audit: type=1800 audit(1593082028.299:996): pid=27888 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:08 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockname$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) io_submit(r1, 0x1ffffffffffffedb, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffffffffffff, 0x0, 0x12f, 0x0, 0x0, 0x3}]) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x4e, 0x1f, 0x1, 0x1, 0x7f, 0xe3, 0xd1, 0x0, 0x2, 0x3, 0x8, 0x8, 0x8, 0x7}, 0xe) 10:47:08 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00e0\n'], 0xb) 10:47:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee8e) 10:47:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:08 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65300a98930e2b6dbfef0993ad08e3d365949fb7a1483cf4f903d58ef1e5a4a0778575dd56bad5df8d2154d551e01a723dba48016b2abef850a39425e6addaabfc26fc4f7907e5f76a89ad537f407662d401878c4641e8346469ba7ebe4424358d40afced67170dd50ac3101c3109df51e015457c9"], 0xb) 10:47:08 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$pfkey(0xffffffffffffff9c, 0xfffffffffffffffe, 0x339241, 0x0) move_mount(r4, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) chroot(&(0x7f0000000200)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) write$binfmt_script(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000180)=r5) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x1bd482, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 10:47:08 executing program 1: r0 = memfd_create(0x0, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1feec1) 10:47:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:09 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "a475148551741ab113cc93dfe455959d6dfc2da33a7d68c2ec44bfd045e6b91494ad3a71137a35a19e724cc8433901d41d23e790c504cf9c4cb726679b9d498d0e90ec21c597f97f268f04c1805edb7f320f"}, 0x5d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) pidfd_open(0x0, 0x0) close(0xffffffffffffffff) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/573, @ANYRES32=0x0], 0x20}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0f23abe7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x11, &(0x7f00000000c0)={r4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r4, 0x1f, 0x7, 0x1, 0x80, 0xfe4b, 0x8, 0xef09ba5, {r6, @in6={{0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0x4, 0x6, 0x1, 0x605b, 0x100}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r7, 0xff}, &(0x7f00000001c0)=0x8) 10:47:09 executing program 5: prctl$PR_SET_PDEATHSIG(0x1, 0x3e) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:09 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xf0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1ff000) 10:47:09 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) write$binfmt_script(r3, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYRES16], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008090}, 0x4c000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000200)={0xb1, ""/177}) io_setup(0x6, &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) 10:47:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x300}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) r2 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r2, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x1, 0x0, {r1}, {r2}, 0x0, 0xb17}) r4 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32=r5], 0x8c, 0x1) lchown(&(0x7f0000000000)='./file0\x00', r3, r5) r6 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x201ff000) 10:47:10 executing program 1: r0 = memfd_create(0x0, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:10 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400201) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x777}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:10 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xfffffdef) 10:47:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x900}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:10 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/2, 0x2}], 0xa, &(0x7f0000001880)=""/164, 0xa4}, 0x11021) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:10 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000100)=""/214, 0xd6, &(0x7f0000000000)=""/108, 0x2, 0x2}}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$P9_RREAD(r2, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0x57) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0x16c, 0x2, 0x0, "3b9dec23eab03cd41335ab5789e6a5b2", "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"}, 0x16c, 0x2) fcntl$addseals(r0, 0x409, 0x7) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000380)={0xa10000, 0x3, 0x4, r3, 0x0, &(0x7f0000000340)={0x980924, 0x200, [], @p_u32=&(0x7f0000000300)=0x400}}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000003c0)={0x62fc361116d9545f, 0x6000, 0x6, 0x8, 0x1c}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c86300a"], 0xb) 10:47:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xa00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x4010040c000) 10:47:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xe00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xf00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:11 executing program 1: r0 = memfd_create(0x0, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:11 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) r7 = fcntl$dupfd(r4, 0x406, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 10:47:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x6000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xfffffffffffffdef) 10:47:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4, @time, {0xfe}, {}, @connect}], 0x1c) 10:47:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x7707}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:11 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 10:47:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xf000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mq_open(&(0x7f0000000040)='}+\x00', 0x80, 0x20, &(0x7f0000000100)={0x3, 0x6, 0x9, 0xea2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xc, r1, 0x1, 0x80, 0x6, @random="4020a265ad68"}, 0x14) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r4 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r5) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32=r5], 0x8c, 0x1) chown(&(0x7f0000000280)='./bus\x00', r2, r5) open$dir(&(0x7f0000000140)='./file0\x00', 0x183000, 0xa6) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = getpgrp(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) rt_tgsigqueueinfo(r0, r2, 0x3, &(0x7f0000000180)={0x1b, 0x80000000, 0x6}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') utimes(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:12 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x10012, r5, 0x2a881000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001bd) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x0, 0x4, 0x0, 0x2}]) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 10:47:13 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:13 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x5, 0x40c000) write$snddsp(r2, &(0x7f0000000240)="d081181d4cc1788b9fc3e0bba02eab9fbe67c1d3a4179ea4cb3f1ae372f63881864b9468350a8abc414dcedda0005eb754e36a2d6a5e56df934fa3e25bbeab168d12e2d3332549a980fa053bc8f31b5f05521f5414ac739060541691131dc7964d021bc63a01a445331f24ce", 0x6c) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x1000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000180)={0x7, 'veth1_macvtap\x00', {0x6}, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r4, 0x3, &(0x7f0000001700)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000001400)="d75c29061928ca57998926874134ac413ada226ed45690d24cf2a1a6949868a81a0366c9d51ca73fe610cf7095cedfc608ab9cbbaab9bb6ffeeddc035e2ac5330095a93be7b126d41402a2ab5ed31e1aa4505b4ad4e1775b6faf5de3a39f2863f201130570797409a620ea42f0b387973db947a32af1758ed6", 0x79, 0x6}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x100, 0xffffffffffffffff, &(0x7f00000014c0)="6bbdf7d0d3ab27353f506e752e36d4aeb15d44694e2d4ada043f3bbbda1c21a64bdfe9881b8bb299bdf81385c34806a61d7f1dfb55faa7a981e52acd5da0bf315fb6ba1e53bd00c0", 0x48, 0x0, 0x0, 0x0, r2}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x7191, 0xffffffffffffffff, &(0x7f00000015c0)="327dc526d41f786270513617fb5522f6c3a1a99f3dacec28fa960197588508b71bb13255711fc8181ba7416d5ab66ed9bc4ff0ad08498dc2f2f1105653e3f2a5d80984192a9f91c9c3fed99cd8f00e637d841a0151702789ce81901b68587b67c7faa85850b5ab35e0290a5b37b2d8784bd7c31024b5f642930e2044a8cfd623ec0d27eaf632ffd3ba53e3d184faa45a77b58f93c03720a0605db4719567dc1e10c17611c1613ce1d91ac3dfd96bffeb64745cdc1e4ffbc9a5058625dcfdf197a63589c241717222c4a582b84adc", 0xce, 0x3}]) 10:47:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 10:47:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 768.778178][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 768.778192][ T29] audit: type=1800 audit(1593082033.640:1015): pid=28054 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0xf6a8, 0x800, 0x1, 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000100)=r7) 10:47:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xfff, 0x3ff}, {0x1}]}, 0x14, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 768.896565][ T29] audit: type=1800 audit(1593082033.700:1016): pid=28054 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 769.033827][ T29] audit: type=1800 audit(1593082033.900:1017): pid=28066 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYRES16=r2, @ANYBLOB="000000000000060000000200000006000b002600000008000700ac1e000108000800e000"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x42840}, 0x8000) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 769.114909][ T29] audit: type=1800 audit(1593082033.940:1018): pid=28066 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:16 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:16 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000280)={0x7ff, 0xfffffff8, 0x4, {0x2, @raw_data="5389a42b8a206fa358d36f5e006ac5af5c4293331b731525df1153922465682230d011a483e563f54f9dc67f1fe31fe26056ab8be011d49a281729923d08b24d327c524f4b680e6bbe4ece16a71253673a0b56fc79c5193b2945a7b839e4c3c9b860ea73b9edb7f52f21a664b056b939aba1706f64ad99ab7fa090c2ec255a92601fd83cd0de440e59f93a78e7d3d9aaf4df62d9468b31563b198674cd76c01d5a62eaaee2a92b642fa05bfa1107055ac53603a7437d1df74c550b99774b20ccd81d7783bd686467"}, 0x3}) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000200)={0x0, 0x0, {0x4, 0x4, 0x2018, 0x5, 0x3, 0x6, 0x2, 0x4}}) 10:47:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2087c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:16 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xfff, 0x4, 0x8, 0x8000, 0x200, 0x80000001, 0x8, 0x5], 0x8, 0x80000, 0x0, r1}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) write$P9_RAUTH(r3, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x40, 0x1, 0x8}}, 0x14) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 771.581871][ T29] audit: type=1800 audit(1593082036.450:1019): pid=28087 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 771.638649][ T29] audit: type=1800 audit(1593082036.500:1020): pid=28087 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:16 executing program 5: timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = dup(r4) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @ioapic={0x4000, 0x625b, 0x81, 0x6, 0x0, [{0x2, 0x7, 0x8, [], 0xff}, {0x3, 0x80, 0x7, [], 0x4}, {0x4, 0x40, 0x40, [], 0x1f}, {0x7, 0x8}, {0x3, 0x40, 0x6, [], 0x80}, {0xf8, 0x80, 0x7, [], 0x1}, {0xe0, 0x4, 0xff, [], 0x3}, {0x1, 0x0, 0x6, [], 0xa9}, {0x81, 0x20, 0x4, [], 0xc0}, {0xf8, 0xbd, 0x9, [], 0x2}, {0x8, 0x3, 0x0, [], 0x9}, {0x2, 0x9, 0x3, [], 0x3}, {0x7, 0x0, 0x9, [], 0x1}, {0x4, 0x6, 0x7f, [], 0x8}, {0x9, 0x8, 0x1, [], 0x8}, {0x1, 0x1, 0x32}, {0x4, 0x0, 0x0, [], 0x80}, {0x9e, 0x3, 0x3, [], 0x7f}, {0x9, 0x1, 0x4, [], 0x7}, {0x40, 0xa8, 0x3, [], 0x9}, {0x8, 0x0, 0x6, [], 0x8}, {0xff, 0x7f, 0x9, [], 0x2}, {0x6, 0x80, 0x2, [], 0x81}, {0x7f, 0x63, 0xff, [], 0x7}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 771.788058][ T29] audit: type=1800 audit(1593082036.650:1021): pid=28097 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 771.848476][ T29] audit: type=1800 audit(1593082036.700:1022): pid=28097 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80000000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000040)=""/26, &(0x7f0000000100)=0x1a) [ 771.906902][T28102] binder: 28101:28102 ioctl 8208ae63 20000200 returned -22 10:47:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xf0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 772.012298][ T29] audit: type=1800 audit(1593082036.880:1023): pid=28109 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:18 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:18 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x43, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 10:47:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @isdn={0x22, 0x2, 0x65, 0x49, 0x1}, @ethernet={0x1, @dev={[], 0x2b}}, @phonet={0x23, 0x9, 0xff, 0x40}, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0x3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x300}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r4, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x3) getresgid(&(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000140)) fchownat(r3, &(0x7f0000000000)='./file0\x00', r4, r5, 0x1000) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x777}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2330202e2f668025d0dcfac469ffe8a3ffd7fefb696c65300a"], 0xb) 10:47:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:19 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f00000000c0)={{0x12, 0x1, 0x340, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "a40064b1"}, {0x5, 0x24, 0x0, 0xab}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x101, 0x5, 0x27}, [@dmm={0x7, 0x24, 0x14, 0x200, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x6c}, @obex={0x5, 0x24, 0x15, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7f, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4b, 0x5, 0x81}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x68, 0xcd, 0x8, 0x40, 0xcd}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x4, 0x0, 0x1000}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x860}}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "72769fd5c23eb253866de54b0a6d7fea76ff684c67c500a41e04c55cbf6b18e9de1aa2d579e53a4672ba92744cee12f63c942b203771b3b2066a78955b6b2972ccd3c0f087f8bd7d03fa59d9757fba71c86eca16c3363bf542bf281324e91593ce0b835947327de40766d44da9b4e3c9ff938c9be58f3c29eb0afd36ea6f48031c8d3891f59a91d59ed79692641a7dfdd2c9db54566ebd7abeb621991af15fe02d3e6cafee1e6e12693e8cc1e5f0d1272bc55da4a4692fcea08256a593d1aee875d251ec75d4a9bfe54bb95ede"}}, {0x62, &(0x7f0000000440)=@string={0x62, 0x3, "8642b55f9db5e1aeae8887d67f2105edff11e2352981e6e4f0f598167cd91a8f84711225f878fc256c2d2fd8d288bb4fe7faec9b850efcb6f6b8ff6bd47cc1f9e09d1fa2a3c95e2b4780002fb810da00e5bdb6f8417fca1b2551ac4da0e224f8"}}]}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x900}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:19 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x7, 0xdbf}) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1'}, 0xb) 10:47:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xa00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 774.274411][ T29] audit: type=1800 audit(1593082039.140:1024): pid=28140 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 774.354740][ T29] audit: type=1800 audit(1593082039.200:1025): pid=28140 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:19 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x6c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @fda={0x66646185, 0xa, 0x2, 0x15}, @flat=@handle}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x81, 0x0, &(0x7f0000000400)="8d21fe0498f18286faf051cb28196d8179de3587ec58675a09ae8a8b8f184fc4f8bff8565cc913b5ef0d6f646c797c9515baccafe7adf6db90e6d1f87fdb441acc1e883e37f198db51b565c9643a27f244bcdc03e32336bd47695fd041743ca5240850f6834a94800e4eeb16b4a422505ade5a80d0935439293812e0efe6976ae7"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcsa\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000500)='./bus\x00', r3, &(0x7f0000000580)='./bus\x00', 0x400) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000100)={0xf4, 0x4, 0x8, 0x328f, "bdfda86412f44164bb0ef1a2c1fd009fb23fdcbf9b6d79d473f2300ef237956b97ce0cb5194f84f7f69ad207fbe23f466f9e3a6415a115662b3561caa3c8328fa32699410d9479b560b9d1bc1373a128efeedc2fc176ab28be81d31e5cc594c625cd96cd3fe94d9e87d8bc6a300bc7b2948ac46289ef601a2ddf4af0ffa356a0475272a33cf171c6774dc0de7974846890710dae0808c7d734465cda906673502db9471a8f339a8d931f84606d98d18baa5fd44f8ae9f9b2377fd0b006db670edf78718b0c8725c2ac9c1ac55363c7feed0288ac627c5886c28418f8"}) 10:47:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xe00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:19 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='+! ./\x00lle0\n'], 0xb) userfaultfd(0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x42080, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x1ff, 0x3, 0x3, 0x960}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [], @broadcast}, 0xef0}}, [0x9, 0x7, 0xfffffffffffff18e, 0x1, 0x0, 0x800, 0x2aeeb02, 0x2, 0x4, 0x2cd6, 0xdbc, 0x6, 0x3ff, 0x6d9184d9, 0x3]}, &(0x7f0000000240)=0x100) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) [ 775.100529][ T29] audit: type=1800 audit(1593082039.970:1026): pid=28160 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xf00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:20 executing program 0: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000100)="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") write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) sendto$phonet(r0, &(0x7f0000000100)="f309330ed23d7aa313cd776f595549961bfa6cad22dc9a2177a80d52b9647373076c1a6aef6ffbc395fb35a6c4d156f0e9153cd09e53144c5921f367034ee08aa60cb70ce0b47a5384b5700352dd39ed0ef7e681fae8d23b1634b50168fc610206ced1951762a41d349b0d8b94f4f6df2f0421834f643c82ac012c65620a94bb8bafe267992b5ee80a46620c264ed7af727e952911fe10d6a696f621509349161159eebf6fe93daa2b63c05a00045952156dff15534fcd9f6423ab03fb963cd9b364f4b00053d3fb31f8e2770377734b5fa5c53bac58d417b55f4dc4c97ddaa732067bf1759841cbf55157b19357dae0c37700ef06e6364007", 0xf9, 0x20040030, &(0x7f0000000040)={0x23, 0x1f, 0x87, 0x22}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000280)) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x6000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x7707}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:22 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65300a1dc5ab9ea3d3d4c06c03dc7c8f221e8eb89b6befbf13c45596df81dc4e4692c8e298f69a4e991c3c6e4247a37b5e524626003c83901fe6097868b11d688f08003a9cc3a077cb4d38d3eb29f1e4ae07148125ae121002"], 0xb) 10:47:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:22 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:22 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019400000000000000000bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x20010, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x4000, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8080004", @ANYRES16=r3, @ANYBLOB="04002dbd7000ffdbdf25020000000c00020000000000000000000c00040001000000000000001c00078008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="0c00050029010000000000001c00078008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRESDEC, @ANYRES32, @ANYBLOB="0c000200ca060000000000000c00060003000000000000000c000500010000000000000008000100000000000c0005000001000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000002, 0x0) 10:47:22 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x7, &(0x7f00000000c0)=0x0) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000500)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) io_submit(r4, 0x7, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x200, r5, &(0x7f0000000180)="c23b3b42f1003733ca55dc", 0xb, 0x7, 0x0, 0x0, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x200, r3, &(0x7f0000000240)="dc61804b10eb5b7d73b9b09861369ea6c96d4b1ad6bc6887eb1b70ac80b805eba82bf41eee05835d33af57749d9e8f420f7e98e96ea85b3ee7db5e69f491b39257b033341b9ad07ce70dfec4b189c8e8b8e74f5b1287053241f645e4b1592da6c9c2fd951f59028711283a2ebef7457f25c4d49f5603c1fc8d5d90d31f639d4606f22cb0cf2e160481674e58256ef2d7637899ecb2f0244a17a6ce0654231f2444e35c59662e67f8cbdee6ec413b9395b50201ec3f28962bde55f4f8782b0cdb0f3da7f0420c5a29ab30d6bde3e7a44c73ac6ed067", 0xd5, 0x5, 0x0, 0x2, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x2e80, r0, &(0x7f0000000380)="6b74e9ee2308d8375029dcc6e2239c8feb92b988cfa2223fe102f32c853b1a4801a8b7c52dbfb917d44b20a4aefe66b5d4ef3c9a779935beae1163d8d7c65b4758603f38e94554b8e615b61254784bfab632df531a8b07fac928d727a67c025d8a28ffc7f4938dfbadb877514919303e390415477d4fd23807c8730b338fdba3a0270cd144e160b58bad9c7bdebb955d572c9b0d60fa7acc709b2ec56b69ece56e10b944a4fd32890d1947", 0xab, 0xe9, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, r7, &(0x7f0000000480)="7f4442af2b0c54f934f1381041", 0xd, 0xffff, 0x0, 0x1, r8}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0x487a, r1, &(0x7f0000000580)="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", 0x1000, 0x9, 0x0, 0x1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x7fff, 0xffffffffffffffff, &(0x7f00000015c0)="d92827efd828ee2d853d6e8e6ca4c1d2a06f651935fbba41c34d136f6246465a40666c2718c2b6e323c065e16b62a7f2c36aff09a89f648312ebdb9e4a2f2aa9558ba418e7532631b4b926a891c522ae0536e80852228af06b7499d48e38d98d6f6edda6c8e64cc7420f7fb02124ddae81dad89d43febb661772b640608424e738480fc94071ac39bc62dbe93a9dcc251136b35d967aeaeb2f946a7769ff2e8cc4f906a5dc6a433f8488ba812176aba3", 0xb0, 0x3f, 0x0, 0x4}]) 10:47:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xf000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 777.312015][ T29] audit: type=1800 audit(1593082042.180:1027): pid=28188 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:22 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x210040, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000100)={0xbd, ""/189}) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 777.421212][ T29] audit: type=1800 audit(1593082042.230:1028): pid=28188 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x2010, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000140)={0x0, 0x4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x11, &(0x7f00000000c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x4, 0xc0c7, 0x6, r3}, &(0x7f0000000100)=0x10) r4 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:22 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x7fffffff, 0x0, 0x2}, 0x100, 0x7fff, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x5, 0xfd7, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:22 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f6669cbec0c50be3ff60351b3716c65300a"], 0xb) 10:47:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 777.673144][ T29] audit: type=1800 audit(1593082042.540:1029): pid=28203 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 777.742003][ T29] audit: type=1800 audit(1593082042.600:1030): pid=28209 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x60, 0x0, 0x114, 0x0, 0x7], 0x2, 0x0, 0x200, 0x0, 0x7fffffff}) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xe4) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x81, 0x4, 0x1, 0x6}, 0x37, [0x1, 0x8001, 0x3, 0x0, 0x0, 0x2, 0x81, 0x0, 0x7, 0x80000001, 0x2df, 0x1, 0x40, 0x80000001, 0xe2, 0x4, 0x0, 0x8, 0x8, 0x0, 0x3d5, 0x400, 0x3, 0x5, 0x7f, 0x9, 0xb2c0, 0x0, 0x7ae, 0x8, 0x1, 0x0, 0x5, 0x0, 0x401, 0x0, 0xfffffffd, 0x9, 0x401, 0x4, 0x5, 0x800, 0x8001, 0x7, 0x4, 0x0, 0xd650, 0x4, 0x0, 0x0, 0x61d, 0x8, 0xfffffffc, 0x0, 0x5, 0x0, 0x8, 0x5, 0x100, 0xcb, 0x800, 0x0, 0x0, 0x9], [0x0, 0xfffffffb, 0xfff, 0x9, 0x0, 0x0, 0x7, 0x2, 0x0, 0x7, 0x1, 0x7f, 0x200, 0xfffffff8, 0xf, 0x6, 0x3f, 0x7, 0x7, 0x1, 0x11c00000, 0xf7fffff9, 0x200, 0x4, 0x4, 0xfffffffb, 0x7fff, 0x2, 0x101, 0x3, 0x3ff, 0x2e2e0, 0x3, 0x9, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x9, 0x9, 0x8, 0x0, 0x4, 0x20, 0x0, 0x0, 0xffffffff, 0x40000, 0xffff, 0xfffffe01, 0x8000, 0x6, 0xffff, 0x0, 0x1, 0x0, 0x20400, 0x2, 0x9, 0x4, 0x7, 0x1, 0x121], [0x0, 0x7, 0x6, 0x401, 0x200, 0x0, 0x8, 0x6, 0xdfce, 0x0, 0x97, 0x1000, 0x9, 0x0, 0x0, 0x2, 0x40, 0x3a2d1856, 0x2, 0x6, 0xd0, 0x7, 0x400, 0x6, 0x10001, 0x400, 0x7f, 0x16, 0x6, 0x0, 0x1, 0x2, 0x2, 0x7f, 0x23, 0x0, 0x2, 0x9, 0x3, 0x2, 0x9, 0x90, 0x7ffffffb, 0x7fffffff, 0x9, 0xd4b3, 0x1, 0x1, 0x7fff, 0x20, 0x7, 0x1ff, 0x4, 0xf13d, 0x1, 0x4, 0x0, 0x66, 0x830, 0x400, 0x9, 0x8000, 0x2, 0x8], [0x200, 0x3, 0x7f, 0x4, 0x4, 0x3f, 0x3, 0x9, 0xfffffffa, 0xfe, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x93c4, 0x1ff, 0x8919, 0x1, 0x7f, 0x80000001, 0x0, 0x9, 0x0, 0x800, 0x97a, 0x7, 0x4, 0xfffff800, 0x0, 0x877, 0x1, 0x0, 0x9, 0x3, 0x1, 0x8b4, 0x0, 0x7, 0x80, 0x1000, 0x18b6151, 0x7fff, 0xff, 0x7fffffff, 0x3, 0x401, 0x7, 0x3f, 0x1ff, 0x2, 0xff, 0x81e, 0x7, 0x0, 0x0, 0x2, 0x40, 0x6, 0x10001, 0x9, 0xfff, 0x4b, 0x7fff]}, 0x45c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x1102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00', &(0x7f0000000100)='[$procmd5sum(wlan1^vboxnet0\x00']) ptrace$setopts(0x4206, r0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) 10:47:22 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000200)=""/225) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 777.987945][ T29] audit: type=1800 audit(1593082042.850:1031): pid=28217 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:22 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) [ 778.054318][ T29] audit: type=1800 audit(1593082042.900:1032): pid=28223 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:23 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x4, 0x2, 0x3, 0x8, 0x1000, 0x1, 0x1, 0x1}}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x92ce75a) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r1, 0x1000, 0x9d}, 0x0, &(0x7f0000000100)="49cd6b0fedfc1d471cc4cc6aa2a506ed32943e41b5a29e98b46526973621c089c7c42cd56f7501452314a815e9cf2fb8b914496814d08c7b1784e65e32182873846ffb8cd0519f1ed80c3cd8ffe521ca8b6d0671894f6fccbd61853998c7dea6836180a40337da4489f677a82befd0982f20051c80ce86f64dd123036d450e6b7c1906d517777daa9c21b185ec837e56da8c587ada08a1326586b0e3b402ad6be96bdf65ce8232c0725f088eefffd00cc51842626ca3f53c5757577375a50b72468ea9dce77c64290f0f1eccf827288aa1c6ca656c13417d8abb6826887c332b1feef14c5e33149cecd720ead2331f063f3d1dc2bdf36f6ffba8dd129564463343744bcf1c244c8734fee8767d1a7a24d470660a36a6e82268974dea2bb30e7e2ee8e9ca63f53c778aad96be1a9586fd6474441061ffc8da47f72067355e61e474d12257fbce543350131ef0304efb2c184ba26aed968a1ab2c06daa757c17a76ddc71e0a86ebf4d9d848e7d218499456e8bca72b1192862a8eee8189689dbe922193d4f9faaf7853d0f385f9a98b9ccaa57b38b906658caaac1d4872660a2a2159ec4810a87a246c258e86ebf1acf154acadcd7225993de856ec8d5df39b6bf7ed8b28f1bafbba034fae6c9a8d66fad7d2f23e9437b10d4b6342319d1778a9cd87afb962eef1e86426a103e9ca5becfc0667bfcc88ca283d7031608b136d7dfdc187c3022dff890551e7ce3c087fd195eb8929a68f465db04d8efac190b99c9c4a28217866156ddc7b95d5ab463959469cb4bfbd8eafd43c711a33d199fe950d014ec99c0b55234628bb13772a9fee53dd56af9a822ef2b19f81dafbfffae45fa835a90660bdea7de7e2a104f7c694a3cac1e2782460674b2c31bc59fe10d60099b6139e7b35e4c765103d1e8c64295fd6b8151202b260e0a246d6b77c20b3e3ba5e483dc2f8431d6e799d46d472b2d0f1b104ed07a545fa8489180369dc15277cb6fdf0ffc9e1dd4fc16f4c5afd2e5df83f5335ea1a5097158fe530fb742ecc783053b61c025adf668b90f9d50cd642930f4d59fcf22830cf34ec5414a11a73ba0cc497ffb4d15e2df92060781439df71f7be9d4181c4fe7ad92f288ccfa43a708947917cc1d75ea23a4e8d442953a8f8e08ef2bc7dfe19930dfe6d6e88eb5835b18aa2fed86ea1be8fb757039a5288eedd6a98c2f254ddd3f9d469bb8dd425a89a5871ef4aa232a026f9aca392382b6618e91364f2d473f2b6956c45dfb98332677811dbebe91214982365a26df71d44dacc239b08ea64496b8393049aab6671fc37c20745f772129149eb973ef248ade0fd11a674936f144910f5084ef980981fbb8bc90c7f1e437c6b205cfe230de423d20f9375e470bbc14ad7ea199f4fe1dd394de5627e219aab798ecc883ec437a0e95a1b98ad06ecbf0e06f3ff2e303edb1ff5c4116e5dcf4620de0105f5b721777eea313d9d283abb5723fbe40c175aaaf969890b8514ace763bc8f8797773cbf2d8f427a1d4aa0e3c755f5ede6db48a2437de4a4d214ba96f7c8b94b84f1bfe58e037d2705eee31f0acac481882410b1df88885c07a6c59225ece98d13bfaec230d7b84d0aefc19ae89a66303e725387914f38c2df5009c851eb959f265637f214f6c1a0285a2c5879cd64476af85c1e66c788be4f031f5ce2ae32e2fe78cd1196b9f0fa0786f3fd9d39d67b9e9a8e46e76ddf90e27b51c54e18bbacf2b4528a87dffc30479b5fffc65941230eccc3f7b25d45884d4980f8efc73c0369660806ef3c00464320787152f5af807bf9127feebc425ea61b7089f5d289b6c02fe133c8279b0a1be2d6d7598aba163d727e1f786eb4230adce9aa07a2111a420456bdd0d383d992aa9482185f20ae440fa7806539919d5973d631ed9c52dc3079ea960c30600cd5a159a6fb0c79c3cf3efe748d8dc84e8533e8038f82df0e60fa1bcf4f110a5d4a727fe4bab2ac8dc79448f653ada99f9bbd1a10182cb3b9e93762e28a4dbd26dc626e0825c06470e75c07c29513df2051d6e9e3bf8d57b6d059d5c6a739c9dd9c130ce3c6ae3c0708970315837604933ca7bdfdaa30dc0ea6f4b3676a4c50b404d531f72193f86520252bca9c53cbd5526c33836568b748405397802b5d562fec86b5148bf461d779db624fc8e68207b865c1b25cfa3491c919da0f919530d5cdca54917f0e218337684faccf91240a285f5f4207b688ed242196401f0be49893b6ae2481f1bbb06a33d18ffbb636020b3d560e00d4e76f727bb090da80d24e944632d448e18b810c6f550a9bc051ce5a94f77a74fc026f8ae0a67d6ebebb5576cfff3f277b76eb25cb950538d81c9f61f759e3a14a3a4404f4436675a627b6da3c90d1660e1a9a9531d9a6506ef29f4b970955d0df1be972a73195d6024ad51f34f5f4ae740edfeae10bb55f3f85c18451b532d0a02b5fc6b76943fd4bc30f82fe32968800711a80fa8c44a6931f30041e9d93e2c7331ecb681740c15e03f43f8eb4bd50c9a02230ac620e57a41ba5230bd3a7c2bed7505036fcf8f9c9e0898ebc635efc2365c33c4760b16d613613412f9fa2aa3abb143799e2d78ccbd16ba5885f15ab58e987a9e81958ad549421e214bf9dfbbe052516723ac0bc0c0c893273aeb8f3b065535884fbaf5d1cef885a14c028a6c2985bb0fda31d2226da6db1317c50f52f023fe208f02eec12d1b6226079f6e14895c8ef7c7965e8cca1bf39f6897232d1f87e43bc84b8a01733713aa07e8e7dc8da4b148fd7d5e6c07bd830953df4524aa2eb28712bbf139e50c019073875778d727fd9f6b05ac6598cd04404366fe57d3df2e40fbdbcf196db5ecc9d1e5ac33bca5a41e3ed068253c9fb927226c35447481a6ac33abc54908e55db1962643ab880808c166319481181a7b83fff9a45fec5eff7635c806f0e6d1d314caa0d8fd8321cc7efaedb0dce153af87326c13692afdb4963548f2b589123c7e90bb48e529129db416844a5f38470a8a7393b825d857f0078b203a73e03b4fef4360ba338522e7d32948d448de2ad52beb64f36c845dfb3f09a72ae5630f2cd108374077e0c365178591f3ac0bb757cd084fbe8acf90ffcc10c752c1ecebcec8ff49a571a316afa045d5f397255d7b76d74c76ff959e6ba698a63a6488ed67d280fb2e064ba3dcbdeee8a7ddee3c78008365ff0fe68983b6f0bf922e2f8eed79de7e7ba1fb142f737663353294da59b6d7e7458ddd66f8c1b9a3d7584f30582abc7f7927030bac1ac6900beaf75ad8ac10e10e849886b7197cbc248ddd305f97d62c04a714e8ca750b749cc221de01b73d3321e00e2b3175424456e1cfe29598607098869b16b4350a415ed3f4cd0b28c965c8e3e84d1c64d4fcfe8b198a78c8c4efbfa59bde5b5fd71bbdd97c792615243322f18fb8e65dde3f1fe7aa133dce2515079e1ec8d69a6c8273e7fc1d67b1c362ecce0f5a61e7ac0f673cef2ad9a2c6e80a9fdc21f723781c87128a7f1309b38f84abc7d99ffe5a3aa7c190aaffc87962b8a08450ad46d76ac8a80b64017e988f4e1f2949c36cbfdcaad5f851627f9ff279886b75814a4d4e4b5d4a222d551102ab9a29e04ff7bf0164a96aa885619ebec4d3328eaef53f180fdf15d239ac0902a42455b692bed6b8c9f1f6f8ea4c336859e5ab9526221e2922bd5be171a3fed483d8864328c551da8e09780da8d29cea66dd85b2496f46ab6a93808809b70496b40c0841c3e7e0cf8b67b8517fa14e0c1150ebf00e8395697d16a6950e77c1694eab049a549028de0ca3ab508df1b6fd30a6125c37e14b8e1c013b599b6f3a397f329cd25e0ce35f37fdfa389bf86c0b4815e0ad0e786bf66e9f84fab54c367e0ee3f6cd288344b38f674ed96f57696ec209cdaeacc8472e8385ec65d6ea2c6ccf3dfd8090b7ee02502bb8373509b6d8072ee28f6048feb289b68d4f1e6bce5e7c48186b419211a010384819eb2d9eb6744eb0d88094ccb3998907e61e5dad14be59719e34469c7a7c98cd7ca5baa83808efc8327381a67e95b82e6ff96eb13378406f2e4c16e2b057514b485b502179767fecb6b69f28860c23e4d2c37fbae27743437e7402131d03b9c3d9b3c6377ebdb817b55c8977ecb982c191fe90825d90a9d7a20a8a3fbaf65b47052de4a3c6106394ce0f5f05c5a12d81ac08ca24d7dd3fd143d17a26a170ebe4d0f2fcdfd3c01a495007684e41332ccb0561655e35ef3063fd12e3746a82882afcc27a3bf524a9c1512d009f018c0ce175ee938b8c5f52c2b40c8b0867162d992933fb00340bed06d41bfd3962e94c4920e8f96ba2a6178944770d5866ee79e066f2e454d9fd596a108eb9ae99b29ab85c229fbd23623b2850d7dbcf7374293406ae98bf66b443aa1fe40cb1642288fdcffa3d4af65831398c9f325d51538d0991ef99602bbbe3b5f17999642e0da274799e6c52cc13a05f3bad76a08c3076cb6a33613e7fb6aad2f174b41a23fd188cfd85bcc8dba3136eaa73324241ddb07babdd32f8dc433b3ffdc528b36177513db9a82bb9269f97a6bc93603a93cf193b297fa5b58bb563f11bb218269135f074ed87f79294dfc95c0c37e838d9a9eb7e4aa6b0716f85db217181a74df281281e397384e389a1284315e255deaba4375d6e66a591bc3271affa95571a2469518734996e358067a7bf65e0fe5d705fe485e5185504b4b887c598bde304c706727396b2286362bcf4269394d26d3e00017427b38c0d802c2fead4181f0a53f9618e0af1db048fa4b2c43bd6d30e0190dabf33d8b01551253ac199d59de4e707e0dd28fcbef7dc74d44ef7838b39746656bb5fa73c23c61bc479dfd07a293916375ce9c7e176fdd828480638102e97bbcb9532b72df4d0cb6c45e22b1ab1d7f90c1f74198f65711cb26a8c13a7d80bb3c39a9909caa430a68b4d5d5cbce746b6b3ecffa93a882ccff8e1661ec536294bf8c927b4bf76504df77eb896afd5f25c6a7d7cda290d02195d7d2bfcc162434ec92e4b1d164bf3ed35f65375e81b7fd825e465398b7c6efb04b58174bcf98a104d2179317842f59bb0f7c7ce2e40909c2be9e64a778af4e41b85d77c314e8650316f3510ee1e870b7d46539333d3f94be17663bb3f196cd2efe4f76020862080938bc206f1100f7caa86df380f35f84edafaa82c4453bc68af7f39a62d04d360e847d00d5197f536dee4ddb13124ec0f1fb2defe645f8501431450bb9fed9d634a3e0b8187472b4083472d13e975511fb99a8f6f01234d0204f8e514896b0465039d0f0d7aba2054d2a4e42578d5e6ad273d38065b97b8d005c7fad3fd4818bd811e2061e7b93ed6a1ea561a39e93342d7f54fe47c9a1964bca2f1ebd8f1b3a3d7165baed306503e595a4354b023d9958b82d777d73dea8a93f28ab4af7bea99144f630bee1631d2ed2068999a4d2e7a843ba970c40d21bef7bc2fb00708e97c1a769096bce710cf068d067fc924cfaf6e6ae2baf378bfaf4f9329a971de7831a850dd084cfb4bde82ea7a4f7a45f07108c824313b7177b73c1067de968095dcd3c013fd31f80c432d473c1caaf40a46d37ef9f870b353ea5c7179af1e7025ee8347666b0ce58cb5ec182d70c5f2e7fff1552fe68616ebde04be1d0021eb062cdfec724085524988c39ecd83f97172e5432c9acd05572ef5a3ca276f5fed3c3c6987e5752922b27d49e59774fc365f501a6be501d7e492661fa8236749d1a4fed709ad7cd94c6585aa9ece0b9cb0ebbfc34c30ea14442303a8e56eeb2d", &(0x7f0000001100)=""/157) fcntl$addseals(r0, 0x409, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001200)={0x6, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}]}) 10:47:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:23 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xf9\x105%\xfa,\x1f\x99\xa2\xc9z\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x1) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) flistxattr(r1, &(0x7f0000000100)=""/198, 0xc6) 10:47:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000100)="25dd193b2b6f39e117f262b594800646acb6df8a8640bb830a63feaff3784bbe4b2d34ca8fd9eeee264271564b7e5c0aafcce2a62a2fce0031635e86b16720e6fe3c616a1a07fb584100e85bc1d6ef36c80f17406e36d0bc771d0a4957ae69840cced395c497ce02c1266ee44b7005ee7678d4cb06d68683f83efc4989c0118170ee4d9752b3b7b91d47b693d9eb5881f2ef83070c8f5f54e5639e515c48bc03fdafb98b0f1d94d38004a232424dde5e924e2e55025cc5ce8d8ba1092a781f5934cee19ec84082e322592e477c189ea16bc4c4ab65a33ec3cf32a89e060ca473cd9949fe08aa8364680682e2", &(0x7f0000000300)=""/179, &(0x7f0000000040)="26485c496e251ad6e2b593922f03f951f224754ddae9bb33d60527f952fad0227ef230", &(0x7f0000000500)="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", 0x0, r1}, 0x38) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) connect$netlink(r0, &(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:25 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:25 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x103602, 0x0) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x410, 0x42, 0x300, 0x70bd2b, 0x25dfdbfd, {0x14}, [@generic="f643b8cd3ca664cdb784d25c339f24de6265971eeaef638f788f4ae6dbce4a819d6c76a11327dbd05b1e34fc51ceed8adff12ed5970b0a694884fd6e24718b10751908cf4e292b8428329d40b2436a3b9c78cf8ff24caef81cdb2b549c2d1a6421ee010b4e84f24111cf7d8e11c7b1f63752158ff6eab4a963dc5425c361e5836de33a42625062f93ce124c324391e29d0cde1bf8de9b71602cfd2631ef6ed454c6fb90a43b666996754ddbd51c88edefe773d7385d22ebf8fb69480c9938a2c8e1db2379e6a07", @generic="e2a6d6384dba136fe5d817def98dc8ed8f9204256ed7cf77f34d99bb49d3b9c494dbebf0abc33d22c9aa2915332295a500fc77fe758a9b4419553d17372837e0a20d31ea38aae7ea50a9aef98fcd8d1fd13542771e59b6ddb743bf5c605ac1d930340eff9b601a5a0b6197d7e7e4b726c163fea5c3096caf51361689264abd1c8746b53e24686dceb978ba17ef7f96127ecc73cace1b34227ccaeee7be3884d7893cc04266c6ba09e1955347e16f51f4c1eeb5815787b66101a9f9b6b371c596ced8694ba14d991d048f3f547082b43aea367908edb32b406c7472e44b24fa7143c31ad89e49c60e", @nested={0x242, 0x6c, 0x0, 0x1, [@generic="958605", @generic="33e37bc11f5353b90add1ee711438e07f14216ca173ae77fda5e73cd97961a3060939658a8011fc3afacab49d1b17f204d1b09dadc2593a0be39e7180a8f364d1cd656ddb3adcdd7bcdd2d2fec07b0ae58b8eaadf314d3a5063df243e3d713c08d8642b91a05b01f45b2004b6f730649d0cc37ba3bdebdc1480794026626934a890dc49a4ee85f4c79dcae9d9500cab0ddb7f06dc3983df584051bac269cf51f1ee5a604696eb26c97a83081cb4066ba517737c7cfbe640a0bc3033331abf5bd2f173d8d86f112bca20c3778", @generic="b4031ffbf5c204f24af55b1666a2ed53b86bd998b4527a9c79e4438a2bfacf5fc120dd670025c6e0f0353dbf37c81ab03da7b8785e5a11b1c8d4773ae79c95b62e80dd4757154416b49e8e4b012154a6de6aeb7ff7efda5f209e032f40ae562303e87796662b0c2016b0f4f81a03dbf43687e7835db799765b2e9c375f557e14087bdc650d7134766161e86b4ae224a51bb51d7cd38f9aea0c", @generic="6228bceff2ba1b4f2f49ad0ad58d1c82773ebd0cc292a386fb4e16c9ae6d0b44b7cb114fa97daba26a9b4b5f5dc10478f2b6eb3de1e706eed10fd1ca272e2eec06fdcf4aefafeb72c6d59eb0298af15f0e", @typed={0xd, 0x77, 0x0, 0x0, @str='/dev/vcs\x00'}, @generic="f1a58dcb85bef5dc8b3cce813f58d090526674eeb6c5156b3b6f4583d2dcccda69ae1e4dae3669942e490ee794cb2adacbbba0b1bafd3e368a0aef821539c6504eeed919e68a860f788043ed0e7e0fbeb62031fdee6c92e75a2f29740f1b9e105da5905e3105693f57d411d282f9928cdde865e218"]}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r3}]}, 0x410}, 0x1, 0x0, 0x0, 0xc4}, 0x24044840) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000006c0)={0x5, 0x5, 0x5, 0x4a, 0x5, 0x200}) 10:47:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "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"}, 0x144) 10:47:25 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x8000}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES32], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000140)={0xe8, 0x0, 0x3, 0x3}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={r6, 0x100000001}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 781.136508][ T29] audit: type=1800 audit(1593082046.001:1033): pid=28263 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, 0x140e, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffe}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) fcntl$addseals(r2, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x1000) 10:47:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 781.200552][ T29] audit: type=1800 audit(1593082046.031:1034): pid=28263 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:26 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qrtr-tun\x00', 0x80040) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./bus\x00') write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) 10:47:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 781.422405][ T29] audit: type=1800 audit(1593082046.291:1035): pid=28281 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 781.541388][ T29] audit: type=1800 audit(1593082046.321:1036): pid=28281 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:26 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="c0140000", @ANYRES16=r1, @ANYBLOB="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"], 0x14c0}, 0x1, 0x0, 0x0, 0x15}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:26 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c97b5a777dd34a69ac0cf76e0c21fff92576b331c89dca717be22b6d239007bfcc04e9b2c214c378c91015786f86b853edd299bbf7c71934ca5212ffc5b86dbbb8dbc0b1dfc1f47a4de98615b73e9e2c1fa5d4e068f6656d9c49a700875272e4fec411e94492d51022224626eefe53634247f697f955ad36572e000000", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) 10:47:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "4dbdbc9ff975ef6b314133050000009ec513085b82ce357dc8bb1262d0b970f9b83ac6bc1b7f1e6fe492bd1c4e3195aee70100b9cd116f4cac9bec5b92b2b79423efd53d8d266d40aaa4ab6e"}, 0x57) 10:47:26 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008050) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x40404200) readlinkat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/228, 0xe4) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xf0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x300}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:26 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:27 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1, 0x0) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) 10:47:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x777}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x900}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)=r1) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0xfffffffffffffe8b, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r6, 0x9c4d3173ee0d4f2, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x916f60e571c2bc3b}, 0x40010) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 10:47:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xa00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xe00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:27 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x10000}, 0xc080) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:27 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x70002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'geneve1\x00', {0x2, 0x4e20, @private=0xa010100}}) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000200)={0x314, 0x520, 0x0, 0x1, 0x1, [{0x1, 0x5, 0x8, [], 0x402}]}) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xf00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x6000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:27 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 783.142642][T28346] binder: 28345:28346 ioctl 8912 400200 returned -22 [ 783.167498][T28346] binder: 28345:28346 ioctl 8912 400200 returned -22 10:47:28 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x7707}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:28 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:28 executing program 2: pipe(0xfffffffffffffffe) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x86, 0xe1, 0x3f, 0x1ff}, {0x2, 0x6, 0x80}]}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 10:47:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xf000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x3, 0x4, 0x1, 0x3}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000300)={@ax25={{0x3, @bcast, 0x6}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}, {&(0x7f0000000200)=""/215, 0xd7}, &(0x7f0000000100)}, 0xa0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x820000, 0x4) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 10:47:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:29 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) sendto(r2, &(0x7f00000012c0)="719345667780f998fb2bad9170637d5775d533255e562989f737e9934a4071b15092d169c5c9555cd9ef7f884ecb18317559342fd3e7faf30b8b0a06fc22202c3204592b769b2d123008e329c6c0bac08ed79fe8f6", 0x55, 0x20000010, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000011c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000001340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @mcast2, 0xffff}, {0xa, 0x4e22, 0x73, @loopback, 0x1}, r6, 0x9}}, 0x48) r7 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000500)) r8 = pidfd_getfd(r3, r7, 0x0) write$9p(r8, &(0x7f00000001c0)="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", 0x1000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffffffffffee0) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:29 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xf28, @empty, 0x9, 0x3}, 0x20) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r4, 0x51, 0x7b}, &(0x7f0000000200)=ANY=[@ANYBLOB='enc=oaep hash=sha2=6-generic\x00'/78], &(0x7f0000000280)="dd55944563ef38f87e071224d5f6e84d98a4913f90e5f57aa73d47da21e834f8d24e583f796cb33e149ec6249fb1a5da878f431b779d5dcd7902357f1d9e130ff5c50ea9e5bc662225c894611db0731538", &(0x7f0000000300)=""/123) 10:47:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:30 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:30 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x11, &(0x7f00000000c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x3}, &(0x7f0000000100)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000240)={0xa00000, 0x0, 0xa1f, r1, 0x0, &(0x7f0000000200)={0x990af6, 0xfffffff7, [], @p_u16=&(0x7f0000000180)=0x5}}) accept$phonet_pipe(r9, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 10:47:30 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYBLOB="ede267369dde75a054c0b5f28fe5982c83eb66e5aabd9a37f48dc52341112a0bd8c8aaaa580a80891e69db9b3897bbdbad6f84efa8c21d0f74680ed37c0b5669af58cc32b46cc0517ff89b19067eaa11f2b0b28bd4ca89c7a2247aa892bb43e1f6dc2f89a2685a41b8094d09f3c71b73c807c5ce215ce105b4c7032fe91c78a88594655e207a5b451679496417116055d160bfd5ab708c59596bce138baa6a5f49e3b920f256a048f82a7bfe73fa8e3f85d9cdad7d083463c92959ba0c5ff363ff30cb66c18ba42af3a1f7aa8f5080f497c175f0651a89d652d7a2adef", @ANYBLOB="93a3a16357f7d44d4a937d796b4df38629aaedc87ef066eb58176605a709bb7623c3b194c876aea29c0c54f101ef6d3376e9692b04a2b8f1dcc162b70f59480e5c357aa7b40de12ff0c42810648cc0887b1402402f928af6a153dda87008758bfdf51f793cf0e301d062c125711e7774a53a9b5ad17764459a4a382e4546194aadaef47783cc4e16863cca169b7484100aa249780d5dade6eadefb158fd267752c8a397c73b211cb2dc83b8093d486f988630cdc3b56838b844a3fc789a13a2979036934bf75512b05b4ecb3f449d84a2bfa56c9ccf3d022b6083460fbfb5383a400"/239, @ANYRES16=r1, @ANYRES64, @ANYRES16], 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0xed5ae000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x89, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r3, 0x0, 0x0, 0x0, r4}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0xa8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x1b, &(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', r7}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000100)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds') write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230a00000000000000000062e972a0cb2654086206e1126a435a682f3ed29e0e39c858a7baf8b9ddcbf13c079ed58acc54326842acefab70a77ebbc2cc2c73c3f82ad3322d764794d33dc7453a2480934a40026d480bf3f6942aacd5cc27ae148ad4c7fa5def8bafdeb425a33a846686aebfdde3fd941fc7"], 0xb) 10:47:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:30 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000200)={0xfff, 0xea, 0x7f, 0x0, 0x2, [0x7, 0x6, 0x9, 0x3], [0x7, 0x21, 0x6, 0x80000000], [0x80000001, 0xdc, 0xfffffffd, 0x237d], [0x1, 0x8001, 0x51, 0x140]}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:31 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) splice(r4, &(0x7f00000000c0)=0xffff, r2, &(0x7f0000000100)=0x800, 0xfff, 0xd) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000180)) fcntl$setstatus(r3, 0x4, 0x800) io_setup(0x6, &(0x7f0000000140)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 10:47:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:32 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:32 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x0, &(0x7f0000000100)) 10:47:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:32 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x28) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:32 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r0, 0x409, 0x7) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000500)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1800f2000000200825bd7000fddbdf2508006500", @ANYRES32=0x0, @ANYBLOB="89ed786a0632b0e849959d3535d03f12514f6dec90339aa383a525929afa9736e3f41954584a5be7e884c1e70b4dfb104fb7b426d6cc308ae96ecf1ed6d4f0f8573a114302"], 0x18}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES64, @ANYBLOB="1c000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYRESOCT, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b139c9d4b10343f4c09d03376028e18ee7674febecc351b6a54cd0e3c583abdb70a0076e0d0d31da9331cd783019dcd3f867697128291146fc50ed2f", @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES64=r8, @ANYRES32=r0, @ANYRESHEX=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r8], 0x120, 0x4004}, 0x20000000) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000100)=0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r2, 0x20, 0x1ff, 0x7, 0x2, 0x1, 0x10000, 0x9, 0x7fff, 0x2, 0x80000000, 0x7}) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x300}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 787.330677][ T29] audit: type=1800 audit(1593082052.201:1037): pid=28432 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:32 executing program 0: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="be05202e2f66696c65300a"], 0xb) prctl$PR_SET_DUMPABLE(0x4, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r3, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x48810) [ 787.400380][ T29] audit: type=1800 audit(1593082052.261:1038): pid=28439 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x777}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x900}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="222839d5", @ANYRES16=r2, @ANYBLOB="01f70000004f0c07eac58bcc8f763d8db0446b1d450dbfcd2252846d56d5676f7b54ccd3fe901518da5ac3967c43440104e372ddd0123728d770799c144557eb4c422d8fc1edc3cb91ca25bfcb514ecd955209cbb8628f4b92b9b8dece2b4e9071b5aac2dacca5ad4dd127b7dc75"], 0x14}}, 0x0) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x9dde, 0x400000) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x1f8, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x518}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x59, 0x3, "3d40655b550d9f12c27ef365ee65a6adeceb2655b1b953f5f378d6ba089022b63f4c6fd6f06bc6384c418b4569e221533c9a71de5367f3ef07edef723bed0850e342e77f2001cca4958465b188cd9169b27e50aeec"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "99977217a28898a16a5f8d9f994ab346413c6f8b71c982e5ea6e"}}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffa3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000081) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x10481) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000400)={r5, 0x2}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000300)={r5, 0x1}) 10:47:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xa00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 787.791681][ T29] audit: type=1800 audit(1593082052.661:1039): pid=28455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 787.911294][ T29] audit: type=1800 audit(1593082052.781:1040): pid=28458 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:33 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r5, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0xb4, 0x4e22, 0x2, 0x2, 0x20, 0x20, 0x6, r3, r5}, {0x8, 0x9953, 0x8, 0x3, 0x1, 0x4121, 0x6, 0x56}, {0xffffffff, 0x8, 0x3ff, 0x10001}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, [], 0x1}, 0x4d3, 0x6c}, 0x2, @in6=@private2, 0x3501, 0x3, 0x3, 0x0, 0x1f, 0x401, 0x80000001}}, 0xe8) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x1e31}}]}}]}, 0x58}}, 0x0) sendto(r1, &(0x7f0000000100)="34e85c177f1b89906359e6065a6b71fbd70fe734582de4b4760e43342b2aa935e4d6cedb88d92f74cc879524a125032d458f7e2618cc501713dfaaa77cc40092458b9483c7953ce34e63b10289f3c6a98995f4", 0x53, 0x20000000, &(0x7f0000000180)=@can={0x1d, r3}, 0x80) 10:47:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xe00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:35 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006e5c88034643db6ff4c7a779bfa070c930f8fc187799963a113da359a87393b13af315c339128d00cdd401caae517d0e5521fddbd76750b366bd02677cd608c21e940941ee46a2c59e9c388db2e1dd062b5653690a890ca654ec9d99b39d51221e6fcee74c2be84e0a4cce4a0a5c499f7dbef09edc9ff517e298406b99fba84ad7a1999d23d138146d2ac700c3d0978f10a554703c07f544e10ec9392d3f8d8d1ab24133d7052a249036551c22116ae55e022152fec984f45a811ddac7ada53ce31deaa1c51bca3b30dc107c269208493bf77a2df201d1bfa807b4e5f62388eeb47af3e0599f3df8b326ae692b1e0d732ffc9ec19421571f11daec5b794fd2b1ef7b31c2aa951b4c4f9aec1fb759131f11e83b14fd0394a6ea66b785d6443092d65522c6dc47feeb743765507416783e9491514902fa43d568ae5c4bd296ca0e3aa254810f8e9e1f67fc9a6ce8ba8bac05365b75320623bc0000c862a04915822027e5d8bd0913ba9a309a91c519eb032e4d0727ab1f55cb2538065e0fdd56b92aee0df8af04efe2199d21e62585de9180df2df332a21f7b5ff2a21f585801d266bc8c850016d212753d0d54b45b3b15337cfb34601db4a9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setregid(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="08000500", @ANYRES16, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) setfsgid(0x0) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$VT_DISALLOCATE(r6, 0x5608) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000080)='syz0\x00') dup2(r3, r4) 10:47:35 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10001, 0x4}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x410040, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x80) fcntl$addseals(r0, 0x409, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) splice(0xffffffffffffffff, &(0x7f0000000280)=0x6, r5, &(0x7f00000002c0), 0x7, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "09bfbd51159579902c92ffe5ffff0000001cfa73c04678328c00ef9a2b072663d1c0000000000000000482fad53c44f23302fdf870840400000000000000993f92d9450f57622efbce45ff3e87359c2bc242a1b8c07cb1d70af54c0dd30cd000000000f53c1748aa2d5d1991c5d5310e9052e122a4e9dbc3762c9e85d64d62926fe599206d8736150a777522255d76d306de096a852cc1084aad709179"}, 0xa8) 10:47:35 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = pidfd_getfd(r1, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) io_submit(r2, 0x5, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xffc1, 0xffffffffffffffff, &(0x7f0000000240)="c0811fe7e6d19aeda23397885a6901a9ec60aaa6324590888a748f8f93", 0x1d, 0xfffffffffffffe00, 0x0, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000002600)="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", 0x106, 0x800}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x9, r5, &(0x7f0000000540)="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", 0x1000, 0xadd, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x81, 0xffffffffffffffff, &(0x7f0000001540)="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", 0x1000, 0x10001, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x7ff, r3, &(0x7f0000002540)="1ef3e500ad4b54c5ef8cd14ccb7a9c11360812ab56b01b59fc856c190cdd05b5128d622cb68a80f38bca14cba44756373c28d3c800baa43468682d92479a1c5ebbebeb44ba4a231e85400959a3beafdb2c3d011ae6dbf839a8aa1f9c036324b12fd6f3479a8fa9d30b4325ee3a0ce839a590d105697e8706d38f2e51a8e71377a6c4ef3574989fd35428ceca74459a1adae405998a9fc5da7ca5a39594bb8318ad3332c45529033c91fb89", 0xab, 0x100, 0x0, 0x1, r7}]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000100)={0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 790.383754][ T29] audit: type=1800 audit(1593082055.251:1041): pid=28471 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) pipe2(&(0x7f0000000000), 0x4000) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b048c913841b0a"], 0xb) 10:47:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x6000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:35 executing program 5: prctl$PR_GET_SECUREBITS(0x1b) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x47, 0x7f, 0x16, 0x80, 0x3f, 0x3, 0x3, 0x2, 0x10e, 0x40, 0x2de, 0xfffffffc, 0x7, 0x38, 0x1, 0x7, 0x3, 0x8}, [{0x6, 0x1, 0x9aa, 0x5, 0x2800000000, 0x80000000, 0x1, 0x10000}], "7d058110bd527a1132e19d11eb4ad69c4caf87dfb1b35329d47e857bd3d7e2d61d042ac632c442ab9b3ca48418a181864da0e80acbe58b0074e7cd7a062c3e18cb56d08e2870b25f7b09e6a9908821dba1dfe8c82d58dd69d51f1fd069d5ab4b102290d05dcfdb580f25de0bc9e98c1a46b5e8d24e43f52a43290ddc4eb90f175799f168e5cfa9a9c9ad9e73cb04bbec371a0eb4df71", [[], [], []]}, 0x40e) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4804c2, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$LOOP_CLR_FD(r0, 0x4c01) 10:47:35 executing program 0: r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~n\xf6O.\xe1F\xcds', 0x7) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x7707}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 790.795845][ T29] audit: type=1800 audit(1593082055.661:1042): pid=28495 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 790.859739][ T29] audit: type=1800 audit(1593082055.711:1043): pid=28499 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:36 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) splice(r2, 0x0, r1, 0x0, 0xffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x8, 0x7, 0x592}}) 10:47:36 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000500)) fstatfs(r0, &(0x7f0000000100)=""/204) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) 10:47:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6042bf0000583a00fe8003100000000000000d00000000aaff0200001000000000000000000000010300907800000000607f112d00002900ff020000000000000000000000000001fe8000000000000000000000000000bb0002000000000000fe8000000000000000000000000000bb7d2a653e1ecaede7d8a5bd82769400004335b1f0e4a40b258e9f94603236b89038323ae2c875c8933310f1c471614e367a674f4448cc290aa5656c29240b9acc4d8e6837a851722147098ea7bffcecf2c7cb164ae6"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:36 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x22e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 791.401300][ T29] audit: type=1800 audit(1593082056.271:1044): pid=28519 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:36 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000cc0)=[{&(0x7f0000000000)=0x2}, {&(0x7f0000000040)=0x2, 0x1}, {&(0x7f0000000100)}, {&(0x7f0000000140)=0x1, 0x1}, {&(0x7f0000000180)=0x1, 0x2}, {&(0x7f00000001c0)=0x2, 0x2}, {&(0x7f0000000200)=0x2, 0x1}, {&(0x7f0000000240)=0x2, 0x2}, {&(0x7f0000000280)=0x1, 0x2}, {&(0x7f00000002c0), 0x1}, {&(0x7f0000000300), 0x2}, {&(0x7f0000000340)=0x2, 0x2}, {&(0x7f0000000380), 0x1}, {&(0x7f00000003c0)=0x1, 0x1}, {&(0x7f0000000400)=0x1, 0x2}, {&(0x7f0000000440)=0x1}, {&(0x7f0000000480)=0x2}, {&(0x7f00000004c0), 0x1}, {&(0x7f0000000500)=0x1}, {&(0x7f0000000540)=0x2, 0x1}, {&(0x7f0000000580)=0x2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=0x2, 0x1}, {&(0x7f0000000640)=0x1}, {&(0x7f0000000680), 0x2}, {&(0x7f00000006c0)=0x2}, {&(0x7f0000000700)=0x1}, {&(0x7f0000000740), 0xb0d5}, {&(0x7f0000000780), 0x1}, {&(0x7f00000007c0)=0x1, 0x1}, {&(0x7f0000000800)=0x1}, {&(0x7f0000000840)=0x1, 0x1}, {&(0x7f0000000880)=0x2}, {&(0x7f00000008c0)=0x2, 0x2}, {&(0x7f0000000900)}, {&(0x7f0000000940), 0x2}, {&(0x7f0000000980), 0x1}, {&(0x7f00000009c0)}, {&(0x7f0000000a00), 0x1}, {&(0x7f0000000a40), 0x1}, {&(0x7f0000000a80)=0x2, 0x1}, {&(0x7f0000000ac0), 0x2}, {&(0x7f0000000b00)=0x1}, {&(0x7f0000000b40)=0x1, 0x1}, {&(0x7f0000000b80)=0x1}, {&(0x7f0000000bc0)=0x2, 0x2}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=0x1}, {&(0x7f0000000c80)=0x1, 0x1}], 0xd, 0x31, &(0x7f0000001000)={0x0, 0x989680}, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 791.442055][ T29] audit: type=1800 audit(1593082056.311:1045): pid=28522 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$security_ima(r2, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000280)=@ng={0x4, 0x5, "aa4531"}, 0x5, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:36 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="234ee5b1f5c4b5299af442de94"], 0xb) 10:47:36 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0xc9b, &(0x7f0000000180)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)=@usbdevfs_disconnect={0x2}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) [ 791.636495][ T29] audit: type=1800 audit(1593082056.501:1046): pid=28531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$unix(r1, &(0x7f0000000100)="a429df4e6b65f6f9a1daf5caf158ec268376cb02cb442dd490e2caa1a8a99a5e4ba452060bf213849b09d974d5ec435e4b5584415586781c58f44205467aa6e7b81e57b9e3458390125ea9f7691a0a4fdc14ca60b3a658700d989fea7a8144aae23f6a75f0b49872d445c0ce539230ad7420a460be0d6bba38ee767b241bec46db1a88e9a0c084b2b43abe43b356cc57c91464cdcacae28d9e7d80f64cd3f457cd2f3b230950708a6d4eeb8b321a5b87b8c543070ebd522e83d3df6b6fc21c121ce67278ff76004991f526236d1e33775603ef280e0e8f5973efef349f3ece1eb52506df6b", 0xe5, 0x24000800, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:37 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xffffff23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x8, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x90) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:37 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x40, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x31) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000011c0)) io_setup(0x100006, &(0x7f0000001200)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sysfs$2(0x2, 0x7fff, &(0x7f00000000c0)=""/44) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x30, r5, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000100)) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:37 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x18, r6, 0x703, 0x0, 0x0, {0x1, 0x0, 0x700}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x88890) 10:47:37 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) fcntl$addseals(r1, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) 10:47:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:37 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4d, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000200)={0x7, 0x1, &(0x7f00000000c0)=[0x9], &(0x7f0000000100)=[0xcb], &(0x7f0000000180)=[0x1f, 0x9]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 10:47:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xa00000, 0x2, 0x80000001, r1, 0x0, &(0x7f0000000100)={0x990a6f, 0x5, [], @p_u8=&(0x7f0000000040)=0x5}}) ioctl$TIOCSBRK(r2, 0x5427) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:38 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:38 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000100)={0xb60, 0x3132564e, 0x2, @stepwise={0x7fffffff, 0x401, 0x1, 0x6fa, 0x72c4, 0x9}}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r3, 0x4) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) faccessat(r1, &(0x7f0000000100)='./file1\x00', 0x2, 0x200) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:38 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0xa, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)="994aa6b1a9eb7778691396cc388cf5ee818876d111dbf45bcdfc3fac888d00fd43f8483bbd7ace140796735ebfe9553a3be113db7f6ac8633da7196d151fa0fc86fb93453d267ac85c3262fc7c12843285af64e0c9afe0c1e09116e863d56fe65d77771dc490eddc35b6c7e6e5c6994395210c30e07fa3d187da43dfa147528a7d856e3d402abb8d73b246aea2c0ba08e86b630f406e7686d744229c31c456478856df18bc105f8ff72bdcecdbaba950f4e45dfb8cbcf008ea1a45f14e273cf645241a28460365b2357c208d75e504700c2acc75fb4fd051059394faacd70ebaaa", 0xe1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 793.931888][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 793.931901][ T29] audit: type=1800 audit(1593082058.802:1048): pid=28594 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:38 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getresgid(&(0x7f0000000100), &(0x7f0000000380), &(0x7f00000003c0)) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getdents64(r4, &(0x7f0000000200)=""/217, 0xd9) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x1407, 0x820, 0x70bd2d, 0x5, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x0, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x46}, 0x1, 0x0, 0x0, 0x20000000}, 0x4815) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xf0}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:39 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) fremovexattr(r4, &(0x7f00000000c0)=@random={'system.', '/dev/full\x00'}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x300}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:39 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x480001, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007c80)=ANY=[@ANYRES16=r3, @ANYBLOB="000000000000060000000200000006000b002600000008000700ac1e000108000800e000"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x10000050) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0xfffffffffffffffe}) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x1) read(r4, &(0x7f00000000c0)=""/116, 0x74) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) 10:47:39 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x777}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:39 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000000)={0xfdbd, 0x180d240f, 0x8, 0x0, 0x92}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000200)=""/4096, 0x1000}, &(0x7f00000000c0), 0x2}, 0x20) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 10:47:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000100)={0x20, "d459072f83e671ffa570441045a653203ac0a5399581c737393dc62890bb921c", 0x400, 0x401, 0x0, 0x8, 0x2}) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000180)={0x4e, 0x2, 0x1f, 0x1, 0x100}) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:39 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = getegid() setregid(r2, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000001c0)={0x1, 0x3, 0xfffffffd}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r4, 0xbcdd5000) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000000)) socketpair(0x8, 0x7, 0x8, &(0x7f00000000c0)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$addseals(r0, 0x409, 0x7) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/183, &(0x7f0000000040)=0xb7) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="67581b07a802e313c0119bebb4e31b7553d299"], 0xb) 10:47:39 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRESOCT=r2], 0x2}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/78) 10:47:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x900}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:39 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="35f07f47948d356eed5b20ebd1ebad6489802d0875407b37213cc9b72e7c3878dd77cd4cf063eb0c38b1eaaefc0c3107cbc42368cf480ff07593ec40b836f23d17fbc058a6", 0x45, r1}, 0x68) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) 10:47:39 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082dbd7000fbdbdf25150000000c00990003000000010000000a000600000000000000000008000307", @ANYRES32=r5, @ANYBLOB="0a000600aaaaaaaaaa1900000c009900b50a0000030000000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x2000000d}, 0x6010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x68, "2579b061a50c77507a931f9b482991618154251c1dba62fc19b56ec4377146ced0225af86de96fa5cbf3173510d27883032cf25f4aaeef14d022342dfde410bf3d60c694524bfde2c7a07593822308a4e02bc31de4038246d233455613333bbda265a9a07e31c279"}, &(0x7f0000000040)=0x8c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x803, 0x4000000}, {0x3ff, 0x5}]}, 0x18, 0x1) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xe00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:40 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, 0x0, 0x0) 10:47:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@ethernet={0x7, @dev={[], 0x29}}, {&(0x7f0000000180)=""/26, 0x1a}, &(0x7f00000001c0), 0x1}, 0xa0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) dup(r2) 10:47:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xf00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = mq_open(&(0x7f0000000340)='\x00', 0x40, 0x9, &(0x7f0000000380)={0x1, 0xb8f, 0x1, 0xb64}) fremovexattr(r1, &(0x7f0000000400)=@random={'osx.', '\x00'}) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x923}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x4000, &(0x7f0000000000), 0x0, r8}) 10:47:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x6000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 795.468519][T28669] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! 10:47:40 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080)) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRESDEC=r3], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0xffffffff, 0x0) 10:47:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0xfff, 0x7}, {0x5, 0x847}]}, 0x14, 0x3) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:40 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) 10:47:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x7707}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:40 executing program 0: r0 = memfd_create(&(0x7f0000000040)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x0) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x1) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\'! ./file0\n'], 0xb) [ 795.761915][ T29] audit: type=1800 audit(1593082060.632:1049): pid=28684 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xf000}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:40 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./bus\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) socket$rds(0x15, 0x5, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x45) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 795.834145][ T29] audit: type=1800 audit(1593082060.662:1050): pid=28684 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:41 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, 0x0, 0x0) 10:47:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x420001, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x4ab0, 0x7, 0xfffffffc, 0x2}, 0x14) 10:47:41 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x10012, r1, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x8, 0x3, 0x4}}, 0x14) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xc33) 10:47:41 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, 0xffffffffffffffff, 0x72b58000) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = fcntl$dupfd(r2, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000100), 0x0, [{}, {}, {}, {}, {}]}, 0xc8) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 10:47:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66ce8f658cf62f9a619e1466694c65300a"], 0xb) 10:47:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000040)=0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20048091) 10:47:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:41 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket$tipc(0x1e, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) sendmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000001900)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001980)="093b000965a84ac18ddccd392b75fe3d094bdb2a2b86898fffa7ba94b6fb73a6f309e2a2b985e1ed31960e111227ccc041bb37603234388c835667c5baf72c29534788d1a37ed0a0e4ec07013439444c222f8778ed88f3b8cf31b1c17292a91502a838e31f31a130e134dce22940d7b3be2445ded895e8f6c8510206b0733d3303de3d6b2a9543811bb220049578155cbdecf9152bec49d55b413e26f27e338f59d17820699daed14b21db7a746af1f293f0e0d7", 0xb4}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)="3eeb084017c7edf1a562ed2abded1e01698f17359f8dd1309ae4c3c8c296d46b57db39b7e8ada20241dcfc58b899554e9a3bc0ad2245922b4f626a57efb4f6fd6a746a790a660c311d0456a8aedeebc0212497ac90a7871180ec519620b9cd8a7be2ff846eb97f9e8505dbbd9c1c1b653068a902080ef101348ed261f3d275623ea5d1c4f5c0f3910280979f6cad4b5cedfa7ff021be708021f7143ec53df6748400752e5057d11259", 0xa9}, {&(0x7f0000001b40)="ba3d9a0998f89229e6adda3b290c36ac98fd66363475af486404e706067ce6e52042b8456f51d805182d2fefcfb2ec7a8701edf9b6d8afcef2ef6100be84f16dcedf6d79e85fe5b9e20bac38342b93252a52dc6e610fcaf43c800e", 0x5b}, {&(0x7f0000001bc0)="cca713736109106e911d7c53e039e042b76ba715dbc98341905bcfe95f4d94e717a2d2c06564d1e3d16952494bac690071c191ac5d386eaca296adb85b26e526f1de115348f6ad63f3feb89f674ae98c80b74479be75bd639d552123c6a2f7abbe1d867e9f4690f342320ce71def00fb6cebc56e04aa0a3d6cf6e1fb5a7bf610c0b9cc20d7f78e6387f66d63f092709e875b675a38fe4441e8d6a52bfa708a869f5f005319c4adb076746b59a2ac3c85b7dfebbae4559d4ef306cfdab6bd", 0xbe}, {&(0x7f0000001c80)="179ac9947448469c7c08a6c01f6738b11e72a4991f0b2a49052f6b74b7c17231bc1a6beef5fbea11f41a141fe979ac0ce5269d111f3b5af28ecfe5b3e51b535c35560c86b8518b4fa1a8fba453349354b59ddcc5640fc1e1cf5180321ea40bd7faecc2c7fbce18baa6b88dd55963bfd461772e02a48ac36205f8ab1bc3ccd29d2092dccd38b3e316948841a93cfec2faa8c3", 0x92}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="0bc5a6900cadd6b73ea5627b2804d5993de3f2536086ba7480b45beaf622c9ab2ae0afea5ecbfd5324841abc9fe6caea8f3c7326a9dd6167b06dc21e426bf8dc925d79940d96c647353a531a5922dced787e2c3c7a5cdc1cc018cede94a6ac34e52eebf728b2184254fb072015bd4751fb14c1dbeb4cb04385ea0f2cd31a190a923cfb37c39ffed71dccbe00861a8a1a6ac39fec95aed5b1f6f911df72f67119614beb", 0xa3}, {&(0x7f0000001e40)="ce07c722c0a7a917ce84d83ca921dcf15200f533bc43ba2e01d3b3", 0x1b}], 0x9}}, {{&(0x7f0000001f40)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="73853f611b98208eb43d6a75735bf23c3749a80a14edfea2b3702c9ab40972f080f8ba54a04479077ffec18433ba8373f10f4aa77bc3b3d24430e8479cc0b4be548edc678fae011f5f05ca4e6d6e124743fef9acacbc06b46e7d29a0705b895c2bb391a09729d7355be27d2d9b5d6ffc", 0x70}, {&(0x7f0000003040)="60fc9efc02bb3f105881f17a3b508376be08ef85ff1531037e1985fd6a6de2236de1539c432e455c6f739683e3c9036fc007cc05b7f2adbce240a22bed95f22ef83f820276b04ca67ff5a0c4409e1e9a9cc0ad18", 0x54}, {&(0x7f00000030c0)="9614fff0e69b43a2c8fc91b3303146839c2cb3acf943c41511beed61754f0980fc89f4949899be96178ea1c6892429a76a94e10d355d847e5b1c9879ebcef8", 0x3f}, {&(0x7f0000003100)="647152e08874a13ac326b94e439e314e52a822a25632e169ebb48772c55d8e58a9e02da3f137be3ea1bc1fc49eba916ac23ddf36b7a7d0914f6bc7bc2265fe2e72109434884baaf7aa5fca271532674882c574defa52bdea9f9b474882ff23f85bc05de4fdde9447c07577d801effb565b13e1a07ed21bd65370e3407b789ba30be7f6af5f1c10765da9b34f6791c2a70d0fdef8e5db4f35beb8cfbda52530ff00ec7d96e4d578e003f6069aa4f576b8", 0xb0}, {&(0x7f00000031c0)="4cff41b9098715d4a429417ae4639d", 0xf}, {&(0x7f0000003200)="4f7b30910ef689e3e9f08e93a0357bfcaa38d66f884fca7670b443", 0x1b}, {&(0x7f0000003240)="b6f808ae1cd33d6387757116bc9ab7eeb5f872d6086ae60635d2f8f17152a867dc78430da10323d93317673c36d8c3c86ff35deeeb1d5828e6fe4c06a645a570315f4ea48449938563ca3fc0724a14eb1d428830325d10244686491abd9c53a3475205b85344ed9f16ce921d19a6928108b9c8acc58fcaee7f6580a7daa37501ab28a25cd2d89e3efbb8ae9ad802cdb1ddddb732358c397cf6d7c273", 0x9c}], 0x8, &(0x7f0000003380)}}, {{&(0x7f00000033c0)=@ll={0x11, 0xc, r3, 0x1, 0xa7, 0x6, @random="bf54f3c722d8"}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003440)="1fe06f2acd7ea847a2346fe3a36ea841dd11a1933cde6bb5f0fa6f202283b1b66a73391956fdb9a7364125976b9ca5f9b791da692ad73c9bceee30cbc15ec474c822c8b117bc70b1f5ff1f5058b1ceae68edc2d1d250766739598658a3017728e21f699af73d548fc0be15700390c3dd98c04c075efa7d6b75abb0dfad39398c5d8cba69abfc6d3e4e182048099ee072b5282fe6811556dfc68d8eaeacae6adbf6b1c774d4f047568b4097dbb5b1dba361a028ecd95b0561a0fa197169dd9e56202c955386341feca544920c5945beca22e4bfd4e3403fb762586bcd5df9b20ff80641474768b92eec15de601bf29eb554", 0xf1}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="143b5ccd8bfe30f752c3c0e0865d4e7da83b7f51877257dbe56ead945116895f5476fc43e91129c1c94d6d78161aa7177925442c0d7f11a6d82934bc73e1b5ecfbc847959a94fbb760d8d47ade2c2368f1530644403b5dac9a6e67b3902c56214a2fca54d47607bfb625af6fe986257c5805eb38f7c151f2fe56fa0ea9eb3055cc25e223ea93a4f27cb48977a25882f47f94496e444b98cc3220091b81d750ccac1e89542d5b829aa5a92514", 0xac}], 0x3}}], 0x3, 0x8000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x121000, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 796.538387][ T29] audit: type=1800 audit(1593082061.402:1051): pid=28728 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 796.630749][T28735] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 796.704774][T28740] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! 10:47:41 executing program 1: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, 0x0, 0x0) 10:47:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:41 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000001c0)=""/244) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x5) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="00042bbd7000fbdbdf250b0000000800090001ac0f0005c83f17cee289571003edddce5fed78486bd972d0abe76eab83bd68c3da9bcc2814c31d18ffcb4e86f0eb1a3742033db4eb2d91f7ebc0339ad92327e5c21c10624ba0050e057416156f1e39da5ca4d3cbc073584b93acfd21e1252600007de86fd7520e2a08bfac79697ae0b57c445bc1f19f9cd09b8bc8068f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xf0}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x8}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x4f5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x3e}]}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x11) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) 10:47:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000006040)={'batadv_slave_0\x00', r4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005dc0)=[{{&(0x7f0000000280)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/81, 0x51}], 0x2, &(0x7f0000000400)=""/56, 0x38}, 0x2}, {{&(0x7f0000000440)=@ax25={{}, [@default, @null, @default, @rose, @null, @null, @bcast, @bcast]}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/12, 0xc}, {&(0x7f0000000800)=""/162, 0xa2}], 0x7, &(0x7f0000000940)=""/4, 0x4}, 0x9}, {{&(0x7f0000000980)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @null, @bcast, @null, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/23, 0x17}], 0x4}, 0xfffffffe}, {{&(0x7f0000002b80)=@rc, 0x80, &(0x7f0000003080)=[{&(0x7f0000002c00)=""/71, 0x47}, {&(0x7f0000002c80)=""/129, 0x81}, {&(0x7f0000002d40)=""/34, 0x22}, {&(0x7f0000002d80)=""/81, 0x51}, {&(0x7f0000002e00)=""/244, 0xf4}, {&(0x7f0000002f00)=""/59, 0x3b}, {&(0x7f0000002f40)=""/197, 0xc5}, {&(0x7f0000003040)=""/49, 0x31}], 0x8, &(0x7f0000003100)=""/58, 0x3a}, 0x3}, {{&(0x7f0000003140)=@rc, 0x80, &(0x7f0000003300)=[{&(0x7f00000031c0)=""/13, 0xd}, {&(0x7f0000003200)=""/250, 0xfa}], 0x2, &(0x7f0000003340)=""/85, 0x55}, 0x10001}, {{&(0x7f00000033c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/104, 0x68}], 0x1, &(0x7f0000003500)=""/53, 0x35}, 0x9}, {{&(0x7f0000003540)=@rc, 0x80, &(0x7f0000003b40)=[{&(0x7f00000035c0)=""/252, 0xfc}, {&(0x7f00000036c0)=""/137, 0x89}, {&(0x7f0000003780)=""/31, 0x1f}, {&(0x7f00000037c0)=""/109, 0x6d}, {&(0x7f0000003840)=""/120, 0x78}, {&(0x7f00000038c0)=""/196, 0xc4}, {&(0x7f00000039c0)=""/244, 0xf4}, {&(0x7f0000003ac0)=""/99, 0x63}], 0x8, &(0x7f0000003bc0)=""/34, 0x22}, 0x2}, {{&(0x7f0000003c00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000003c80)=""/186, 0xba}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x3, &(0x7f0000005d80)=""/16, 0x10}, 0x6f58}], 0x8, 0x2000, &(0x7f0000005fc0)={0x0, 0x989680}) connect$can_bcm(r2, &(0x7f0000006000)={0x1d, r5}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @remote}, {0x306, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'veth1_to_bond\x00'}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x10012, r1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000100)={{0x4, @addr=0x3}, "05a50a6a92d7a980b1721b3bb97f2e12262260d88129817178075f7276ae2f4e"}) 10:47:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 10:47:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000040)=[0xbe30], 0x1, 0x8001, 0x8000, 0x101, 0x4, 0xbe83, 0x3, {0x614812f7, 0x7ff, 0x401, 0x4, 0x800, 0xdb18, 0x8, 0x80, 0x93aa, 0x1, 0x9, 0x6, 0x1, 0xfffffff7, "76372ce6da00b28cf480a2a7490e4895024de0457cdf3840c6dbe1eeaa68872d"}}) 10:47:42 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa\x0e\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:42 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1, 0x1010, r2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0xb4, 0x4) r4 = fcntl$dupfd(r2, 0x0, r2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="010000dd", @ANYRES64], &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0), 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, [], 0x1}, 0x8000008}}, 0x100, 0x2, 0x3, 0x3, 0x2}, &(0x7f00000002c0)=0x98) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @empty, 0x5}, 0x1c) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 10:47:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 797.384307][ T29] audit: type=1800 audit(1593082062.252:1052): pid=28770 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000100)=0x3000) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x3, 0xe, 0x62e, 0x7f, 0x1, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 797.461914][ T29] audit: type=1800 audit(1593082062.302:1053): pid=28770 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:42 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)="c1947cc598c8226adb16d2165b76695d", 0x10, 0x4000800, 0x0, 0x0) 10:47:42 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x14, r4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb6c6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x2001, 0x0, 0xffffffff, 0x3, 0x381}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x3e9, @mcast2, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="4784d40bf7e2519ef207bb5cbad0781444c6f40a4fcb0899c47bef4c0c14d9b54585b3e3601a09cfbaba4134d590980f26531e3e67562ca152465428797cc64ee73c3de823cf05477f42c2e0df8693e8d557bd01bbb952a32c779a2dcc80abcbaac0ecf96465f4aa1049eaefd66ab99c9804dd377fee54a167141ae56a655d90fcfd9927c127169f3dec336e2e257dc55b5a64ea44f798fae0dc30ee21017fd670a678", 0xa3}, {&(0x7f0000000180)="50525814435bb0924dd9f35656b83017c6c2aefdd73df6d21f1918e3fdc2d795eb1c5e2ad6a7dc1b1543ff16c95855b904f7fbd3e825d79c93c6ff", 0x3b}, {&(0x7f00000001c0)="14494bb580f04a61ac662aa7269f3cc83f7d132ce97db2b47abdb055fa159e1b71cfe66eab10", 0x26}], 0x3, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @txtime={{0x18}}], 0x78}, 0x20008800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x8, 0x80000000}, {0xfffffffc, 0x2}]}, 0x14, 0x0) fcntl$setlease(r2, 0x400, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100) 10:47:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 10:47:42 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x1, 0x0, 0x6c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x2}}, 0x4841) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r5, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x138, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf5, 0x3, "5dccc57a597160591d9bcf2154d0bd6c39aff9550879690e3976008b21723aceb30001896c21d2f22dd2b82a25ef6d0fc40ae1f3d5acb360f3dfd0f3d3db238b9a62a8014bfff4ee24ca88be3279241b406781aa0adbef1a9d19e9540013e34de011cf08c05b0363a6af62cc84514584aaf155111ecd5f6c6a7db048d717ef9ec90639776fca57a834f3806a430fb212815967ff282b9f192f5e104f170a3ab924a838da26c5dc39fa3adda0d47916f2ce89e94c8b5833f187e0a69410c3096e7c00c7239355d0bcd76de8e18016c9d1734d382eb69d2babfca5e13f0987340480d548c363c5aac5a317cc708bec92c59b"}]}, @TIPC_NLA_NET={0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x4044080}, 0x4004001) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:43 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 10:47:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x80080, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xfc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', r2}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x0, &(0x7f0000000040)) 10:47:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="ecfb3302c6c05201c770384f2bec4365f112db8546644968fb98fd1e8780d8943b568dfc2a0f04a43d49fa9164183f8ad614c92e95e61ad08f7e91d9b9828a71e2a4b5b3179bbb7249525065255c529a3e", @ANYRES64=r3, @ANYRES64=r4, @ANYRESHEX=r5, @ANYRESDEC=r6], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:43 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x4) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x68fab) ioctl$KVM_SMI(r1, 0xaeb7) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) accept4$unix(r4, 0x0, &(0x7f0000000180), 0x0) ftruncate(r0, 0xb) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) r1 = syz_open_dev$hiddev(&(0x7f0000000100)='/dev/usb/hiddev#\x00', 0x80, 0x412800) fsetxattr$security_evm(r1, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000300)=@v2={0x3, 0x2, 0x0, 0x2cfb, 0xe1, "798893776eb5f347733bb54bd74a8b4612bee368659d88616887e150352b1c0e1b978aeaabb48f38c226e9cf390d3ab529c79ca04523864749b4a4d28ee3cd1a7a380cfe9ab7eb30d6d648cd48aab4e1d581f3b668b5eadcfb17cde50d0e080ba2ae44ac4d38417ad8fc29400c21ba6de9f41566792017b9547ade837a8c9819217f4b92d2210120dbee7da96ddbbff81f654209737de49e474551426cbff0841f0cd53980441f2d38daa6f76e6b24b5fd73b9c5bf4c680c823a96b9d8bc835f1bf94464695d864165452d096ceb8ba9048c20ea3f0c7135b1b52a6fcb09a05c0b"}, 0xea, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x732}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000011c0)=0x8) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r2, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) getpriority(0x1, r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x41, 0x1400) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {0x3}, @connect}], 0x1c) 10:47:43 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x3a9000, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x4) 10:47:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 10:47:43 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x400, 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) read$usbfs(r1, &(0x7f0000000040)=""/12, 0xc) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x76b101aeb571228f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000300)='./bus/../file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0xd5, 0x8024, "89a94050a3518036459af5218a7d8a83c67a13bca236a0c2392b4125116f5ae778bd8f249fc86e61c9ac10067f6624defac04322e9dcbe332e10a28f3eadbd3a1c9d10ff469274844d634e99076bf271a3162cf1f1fb0012ac135ead184b0d44bd4d1546798675f39edeb928977b5263aef8607583ec6dc410ad791dec817c1fde2204adb6b1da921ea94904329a477f536e79869a6546e7207da5708c7accc8dc1d30a9c1bfa2a4b8381377866dbd6b204f2e297486757e8e4fca7bdecf8d8637a434c5ada737b043e0462b9e"}, &(0x7f0000000280), 0x1400) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x9780}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000340)) 10:47:43 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x20006, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:43 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x3) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40101}, 0xc) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:44 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 10:47:44 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x20800) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x1, 0x6, 0x5, 0x31e9}, {0x5, 0x0, 0x8, 0x40}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 10:47:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000001600)={0x2, 0x3, 0x6, 0x2, 0x136a0000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) process_vm_writev(r1, &(0x7f0000001500)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000001780)=""/98, 0x62}], 0x7, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:44 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 10:47:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:44 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x1, 0x5, 0x3}) 10:47:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000500)="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", &(0x7f0000000300)=""/184, &(0x7f00000003c0)="5a5ed60435dc3e49951af6c967b3283e69dcdf40a0d123a3e77ca42508b55d6296fa7d6977deb7c09cc7e890ec1e652956277b396b13b87683a2252079e7c5d748ab4cbc058965c2c1ac4790f5c4136ca17efcd8d44c200322f22f32a031a7bdcfa71468a2cd97a1b536f995c5196f6935e18d9236d2ce3fd801e2c5b11a267c91a20f0baaa010da7d9d925a3d88d40c1f5ea8f46883d30a66b681c74f0bfec39d4a3156ea83a95cb6d22a599c8d91e900c2", &(0x7f0000000280)="a57e606d9dd178fbbd0e8195ecb44bc124996aa360c3106dca", 0x6, r0, 0x4}, 0x38) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x35d}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:44 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000000c0)="37b0213d3d986c1d5b5657b633a28283994696d7a09e6b96b82466dee4144431289550346b5fc835712573cd449589c64cd1e274c8f5198d215933f7895570da483da8ebef59de649813c4ad11aee51096471c79", 0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x54, 0x2, 0x4, "b22dcda6abeac44915df9c07b377c77f", "226e98a5114c486c2ad8bc5d246d85cab89a3213cc2881e4842755ad81fc5eec25aaaabc0432d89ab95aecc565fa6c2dceb0ba481e34c5408565e40cc8973b"}, 0x54, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 10:47:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000500)={{0x2, 0x6, 0x8, 0x6, 'syz0\x00', 0x40}, 0x1, [0x9, 0x8, 0xd4, 0x1, 0x658, 0x6, 0x8, 0x1ff, 0x1000, 0x7, 0x0, 0x2, 0x3, 0x0, 0x7, 0x1000200000000000, 0xffffffff7fffffff, 0x6, 0x7, 0x5f, 0x7fff, 0x100000001, 0x8, 0x8, 0x0, 0x40, 0x0, 0x7f, 0x4, 0x200, 0x6df, 0x8, 0x80, 0x20, 0x3, 0x6, 0x7f, 0x4, 0x6, 0x7, 0x3ff, 0x400, 0x100000001, 0x3, 0x200000, 0x100000001, 0xfffffffffffffffb, 0x5, 0x40, 0x0, 0x6, 0x250b3702, 0x9, 0x7, 0x10000, 0x7, 0x5, 0x7fffffff, 0x3, 0x20, 0x5, 0x8001, 0x9, 0x1, 0x1, 0x20, 0x3, 0x8, 0x8, 0x7, 0x83, 0xfffffffffffffffe, 0x8001, 0x74, 0x20, 0x6, 0xfff, 0x3, 0x1, 0x8, 0x9, 0x3, 0x40, 0x1, 0x3, 0x280, 0x98, 0x2, 0x6, 0x4, 0x8, 0x8, 0x200, 0x9, 0xff, 0x2, 0x4, 0x8000, 0x8, 0x8, 0x4000, 0x10001, 0xffffffff, 0x1000, 0x800, 0x1f, 0x3, 0x3, 0x401, 0xcd6, 0x5, 0xaa84, 0x2, 0xd07a, 0x3ff, 0x800, 0xffff, 0x6, 0x4, 0x7ff, 0x1, 0x8, 0xb5fe, 0x8c8, 0x1, 0x81, 0x3, 0x2]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r0, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002e0019034643db8d5abfa54f6ff4c79079bfe070c916cc30a81cf7ccc2b1ec15834ee401006a7d5a9713070daa4a20276f73f56427651e6385bdd73e1ba23200e0322d11d400000000000000007357af43c1ea0b9986c06d3ce2b80b46a011dd6e797720c690a5472532c7a192ed0bf367c7a19dcc61076db2ed4198a1a17dea86754b", @ANYRES32], 0x2}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x4, 0x0, 0x0, "105b5acacf3e1f175923d34007c2e074f46a6dbca8d1646f78c94d92d3f81afa", 0x38414262}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$l2tp6(0xa, 0x2, 0x73) splice(r2, 0x0, r4, 0x0, 0xffffffff, 0x0) 10:47:45 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 10:47:45 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) setregid(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r2) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32=r2], 0x8c, 0x1) r3 = getegid() perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r4) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX], 0x8c, 0x2) r5 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r6) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32=r6], 0x8c, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x4}, [{0x2, 0xa}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x1}, {0x8, 0x2, r2}, {0x8, 0x5, r3}, {0x8, 0x6, r4}, {0x8, 0x1, r6}], {0x10, 0x4}, {0x20, 0x7}}, 0x7c, 0x4) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) socket$pptp(0x18, 0x1, 0x2) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000000901020000000000da6fa188c726f4b16edf4639000000030000070800054000001fc76a6456330a1b00000340000000080800064098fcff22fdc00256fd0037d07a201cb448cda2ff00000934a800000300070000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x2, 0x2, 0x7}}, 0x14) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x1000020) 10:47:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 10:47:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 800.290122][ T29] audit: type=1800 audit(1593082065.162:1054): pid=28913 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 800.400490][ T29] audit: type=1800 audit(1593082065.272:1055): pid=28921 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:45 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x9df951a6780262ac, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf33}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x9c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008041}, 0x40040) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:47:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/43) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0xffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) fcntl$addseals(r1, 0x409, 0x7) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = socket$unix(0x1, 0x5, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="576232a5f6367ab137604b7c5b8719663f3d353e3c210ef16d3b152ebc1962f3f42fe2234b7319b9a57b4ea0388cc46d2ffd0afbfb774e1f72fc40cd29003dcece658fa3247b44f509195ff9421f36438b9883a27f4190db8c8d68e577e7360d72602719edf532823aedead468f0bd0c11ef70580c1503114e24009f90432ddbbd1a32a8714c4f89be4f7cf52be3e2b2e958a86aaf9f8e63a778d1edecdb4db5", @ANYRESHEX, @ANYRESDEC], 0xb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000001c0)=0x2, 0x4) 10:47:45 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000006c0)={0x7ff, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x220, 0x220, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @remote, 0xff000000, 0xffffff00, 0x9, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x0, 0x7b0, 0x3, 0xc, 0x42e, 'geneve0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x580}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @private=0xa010102, 0x4, 0xffffffff}}}, {{@arp={@loopback, @remote, 0xff, 0xffffff00, 0xe, 0xd, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff, 0x3, 0x4, 0x81, 0x1, 0x26, 'ipvlan0\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="be8678a1788a", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xf, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0xffffffff, 0x4, 0xb, {@mac, {[0x0, 0x0, 0x0, 0xff, 0x45316cfa00accae5]}}, {@mac=@random="3e6688d02b80", {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0x1, 0x7, 0x0, 0xfb73, 0x5, 'nr0\x00', 'veth0_to_team\x00', {0xff}}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d72829409b73e2c07c2efcce5b50ea3039b2f58999861046fa34b7872c3a"}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000500)) r6 = syz_open_dev$binderN(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) r7 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000500)) r8 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f00000028c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r5, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES16=r6, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYBLOB="e52711b4eb17cb0f14e13c0e5e22758257a398c113ddcd78fed0412c25a6ceddf3627be7d3986a0bf03b59d8fd5d1247d2f83e7fd00d5ecdc7e54885a1f2da11c65490555db3500f3fe632b688bacda0a034b66de69281daa68f228520e125a6c9309f72c89b2843ef3cc6d0fb52fb43bfb3e965e795b3fc87bb4f2e15dc50", @ANYRES64], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000003c0)={0x3, 0x0, [0x0, 0x0, 0x0]}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000340)={0xe895, 0x9, 0x0, 0x1, 0x5, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x392, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0001, 0xc58, [], @value=0x4}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000) r6 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r6, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:45 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x34, 0x29, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xfff1, 0xffe0}, {0x5, 0x7}}, [@TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc8c9}, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 10:47:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x62) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x20, 0x1, 0x1, 0x4, 0x1, 0x81}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32=r1, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRESOCT=0x0], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x10010, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000100)={0x2, 0x831, 0x80000001, 0x400, 0x4, 0x3, 0xfffffff7}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x1ec41, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1eb07eb7, 0x4) close(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x0, &(0x7f0000000040)) 10:47:45 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0xfffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="d99a28bdc3f4215d5da9bcbbbf7ba1004de586d66c9cff6dba66d8ac5fec76e0c7c8d8cf6390fb09aa9e5360532802a3d52f2ccd01ce03436420673686ad56cab22859705c4f49732d516679fe97825cf8478a83b79f022d7fa6b359a2ac14543c38cdc4e27f5cf9c3074841eab928e75cbeb56880b90cae16146a7f4c691ee51f7db6a18ac3f3b4a24a3b24dc4f2532c166db4cdeaea60aa30ca7056cf3072226ffec312250c983ca"], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x810, r4, 0xeacd9000) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000280)) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) 10:47:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:46 executing program 5 (fault-call:3 fault-nth:0): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002580)='/dev/btrfs-control\x00', 0xa200, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000025c0)={@dev, @local, @multicast2}, &(0x7f0000002600)=0xc) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x404a40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)={0x0, 0x40, 0x10b0554f}) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='./cgroup.net/syz1\x00') fsetxattr$security_ima(r2, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "514c5e06048e7d62f828b8b047a2d3d4"}, 0x11, 0x1) 10:47:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) 10:47:46 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) 10:47:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 801.211655][T28964] FAULT_INJECTION: forcing a failure. [ 801.211655][T28964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.223770][ T29] audit: type=1800 audit(1593082066.092:1056): pid=28966 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:46 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x100000) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 801.310391][ T29] audit: type=1800 audit(1593082066.152:1057): pid=28966 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="./cgroup.net/sy" name="bus" dev="sda1" ino=15755 res=0 [ 801.310900][T28964] CPU: 1 PID: 28964 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 801.340674][T28964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.351459][T28964] Call Trace: [ 801.354973][T28964] dump_stack+0x188/0x20d [ 801.359539][T28964] should_fail.cold+0x5/0xa [ 801.365341][T28964] ? fault_create_debugfs_attr+0x140/0x140 [ 801.372130][T28964] ? __lock_acquire+0xc6c/0x48a0 [ 801.377903][T28964] __alloc_pages_nodemask+0x17a/0x810 [ 801.384247][T28964] ? debug_smp_processor_id+0x2f/0x185 [ 801.389944][T28964] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 801.396848][T28964] ? __bfs+0x520/0x520 [ 801.401398][T28964] ? debug_smp_processor_id+0x2f/0x185 [ 801.408446][T28964] alloc_pages_vma+0xd9/0x600 [ 801.413921][T28964] shmem_alloc_page+0xb0/0x170 [ 801.419233][T28973] binder: 28972:28973 ioctl 40086602 20000000 returned -22 [ 801.419436][T28964] ? shmem_swapin+0x1a0/0x1a0 [ 801.419497][T28964] ? percpu_counter_add_batch+0x123/0x180 [ 801.439212][T28964] ? __vm_enough_memory+0x10f/0x280 [ 801.444829][T28964] shmem_alloc_and_acct_page+0x160/0x980 [ 801.451917][T28964] shmem_getpage_gfp+0x514/0x24f0 [ 801.457555][T28964] ? __mark_inode_dirty+0x3a9/0x1330 [ 801.459811][T28973] binder: 28972:28973 ioctl 40086602 20000000 returned -22 [ 801.463557][T28964] ? shmem_unused_huge_scan+0xb0/0xb0 [ 801.463578][T28964] ? rwlock_bug.part.0+0x90/0x90 [ 801.463598][T28964] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 801.463622][T28964] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 801.463647][T28964] shmem_write_begin+0x102/0x1e0 [ 801.463673][T28964] generic_perform_write+0x20a/0x4e0 [ 801.463701][T28964] ? __mnt_drop_write+0x50/0x80 [ 801.463727][T28964] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 801.521209][T28964] ? update_time+0xc0/0xc0 [ 801.526111][T28964] ? down_write+0xdb/0x150 [ 801.530806][T28964] __generic_file_write_iter+0x24c/0x610 [ 801.536575][T28964] generic_file_write_iter+0x3f3/0x630 [ 801.542401][T28964] ? __generic_file_write_iter+0x610/0x610 [ 801.548802][T28964] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 801.556316][T28964] ? find_held_lock+0x2d/0x110 10:47:46 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) readv(r0, &(0x7f0000000000), 0x0) [ 801.561834][T28964] ? __fget_files+0x30d/0x500 [ 801.566868][T28964] new_sync_write+0x426/0x650 [ 801.571964][T28964] ? new_sync_read+0x6d0/0x6d0 [ 801.577880][T28964] ? debug_smp_processor_id+0x2f/0x185 [ 801.583680][T28964] ? rcu_read_lock_any_held+0xcd/0xf0 [ 801.590065][T28964] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 801.595573][T28964] __vfs_write+0xc9/0x100 [ 801.600148][T28964] vfs_write+0x268/0x5d0 [ 801.605197][T28964] ksys_write+0x12d/0x250 10:47:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8001) [ 801.609830][T28964] ? __ia32_sys_read+0xb0/0xb0 [ 801.614741][T28964] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 801.621123][T28964] ? do_syscall_64+0x21/0x7d0 [ 801.626275][T28964] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 801.632396][T28964] do_syscall_64+0xf6/0x7d0 [ 801.637386][T28964] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 801.644021][T28964] RIP: 0033:0x45ca59 [ 801.651426][T28964] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.684849][T28964] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 801.697322][T28964] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 801.709866][T28964] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 801.718864][T28964] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 801.727442][T28964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 801.736338][T28964] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:46 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) r4 = dup2(r3, r2) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb8, 0x1, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x77}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8177}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10015}, 0x4001) r5 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000280)) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2}}, 0x40) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000080)={0x6, 0x20, 0xfff}) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:46 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x800182, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x42b, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfff, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 10:47:46 executing program 5 (fault-call:3 fault-nth:1): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 802.034746][T28991] FAULT_INJECTION: forcing a failure. [ 802.034746][T28991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:47:46 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x6) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r3, 0xf6, "3672d5d15dc359499a131785478f667d7c207806a5a539d35e7cd4d30675272a5fc4ae0d2582fcf7968bfe418db6ac431730c3553544f2006d50f67af683a119b220e4d4d80814309c045b8e5897e64666d2930f92a378298f3d4e02c38a97942d72bfe31190ce4078824fdcaca483156bd7deaf40066eb06b133eee2d8f158aef6aec64a48d8c9062920e12b1661cc1d67d0f16d49becdd3ffb6d8775b8cfdc24fb3763ab915c3f6c881ddf0c39a1a1b3eb9211086f38258b749e90b670c2238123e27564de42fdcb167eba39907d0827f28cf31c4fc3297b0c67572c7c88466616f099fdfcaefa89ed567ae138138add3f80564782"}, &(0x7f0000000240)=0xfe) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfffffffffffffda6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 802.112679][T28991] CPU: 1 PID: 28991 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 802.122679][T28991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.134326][T28991] Call Trace: [ 802.138135][T28991] dump_stack+0x188/0x20d [ 802.143206][T28991] should_fail.cold+0x5/0xa [ 802.148599][T28991] ? fault_create_debugfs_attr+0x140/0x140 [ 802.155502][T28991] ? __lock_acquire+0xc6c/0x48a0 [ 802.160965][T28991] __alloc_pages_nodemask+0x17a/0x810 [ 802.166648][T28991] ? is_dynamic_key+0x1a0/0x1a0 [ 802.172346][T28991] ? debug_smp_processor_id+0x2f/0x185 [ 802.178529][T28991] ? debug_smp_processor_id+0x2f/0x185 [ 802.184804][T28991] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 802.191906][T28991] ? __bfs+0x520/0x520 [ 802.196868][T28991] ? debug_smp_processor_id+0x2f/0x185 [ 802.203188][T28991] alloc_pages_vma+0xd9/0x600 [ 802.209409][T28991] shmem_alloc_page+0xb0/0x170 [ 802.215647][T28991] ? shmem_swapin+0x1a0/0x1a0 [ 802.220688][T28991] ? percpu_counter_add_batch+0x123/0x180 [ 802.227603][T28991] ? __vm_enough_memory+0x10f/0x280 [ 802.233743][T28991] shmem_alloc_and_acct_page+0x160/0x980 [ 802.240421][T28991] shmem_getpage_gfp+0x514/0x24f0 [ 802.246846][T28991] ? shmem_unused_huge_scan+0xb0/0xb0 [ 802.253477][T28991] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 802.261357][T28991] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 802.268434][T28991] shmem_write_begin+0x102/0x1e0 [ 802.274897][T28991] generic_perform_write+0x20a/0x4e0 [ 802.281064][T28991] ? __mnt_drop_write+0x50/0x80 [ 802.287149][T28991] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 802.299795][T28991] ? update_time+0xc0/0xc0 [ 802.306633][T28991] ? down_write+0xdb/0x150 [ 802.311932][T28991] __generic_file_write_iter+0x24c/0x610 [ 802.319041][T28991] generic_file_write_iter+0x3f3/0x630 [ 802.325269][T28991] ? __generic_file_write_iter+0x610/0x610 [ 802.331982][T28991] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 802.338547][T28991] ? find_held_lock+0x2d/0x110 [ 802.343434][T28991] ? __fget_files+0x30d/0x500 [ 802.348981][T28991] new_sync_write+0x426/0x650 [ 802.353882][T28991] ? new_sync_read+0x6d0/0x6d0 [ 802.359671][T28991] ? debug_smp_processor_id+0x2f/0x185 [ 802.367029][T28991] ? rcu_read_lock_any_held+0xcd/0xf0 [ 802.372711][T28991] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 802.378803][T28991] __vfs_write+0xc9/0x100 [ 802.383765][T28991] vfs_write+0x268/0x5d0 [ 802.388588][T28991] ksys_write+0x12d/0x250 [ 802.393225][T28991] ? __ia32_sys_read+0xb0/0xb0 [ 802.399939][T28991] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 802.407328][T28991] ? do_syscall_64+0x21/0x7d0 [ 802.412771][T28991] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 802.420217][T28991] do_syscall_64+0xf6/0x7d0 [ 802.425145][T28991] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 802.432913][T28991] RIP: 0033:0x45ca59 [ 802.437518][T28991] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.462829][T28991] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 802.473352][T28991] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 802.484286][T28991] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 802.495307][T28991] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 802.504875][T28991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 802.513681][T28991] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:47 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0x7, {0x40, 0xfffffffe, 0x6, 0x3}}) 10:47:47 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909e1, 0x1d45, [], @p_u8=&(0x7f0000000000)=0x5}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) fsync(r2) 10:47:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:47 executing program 5 (fault-call:3 fault-nth:2): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x120, 0x0, 0xffffffff, 0x120, 0x350, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @loopback}, @remote, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff00], 'macvlan0\x00', 'vcan0\x00', {}, {0xff}, 0xc, 0x1, 0x1, 0xe}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d5, 0x4d4], 0xffffffc1, 0x57, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x5, @port=0x4e23}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x2, 0x9}}, @common=@hl={{0x28, 'hl\x00'}, {0x2, 0x7f}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv4=@loopback, @icmp_id=0x64, @gre_key=0x101}}}, {{@ipv6={@ipv4={[], [], @private=0xa010102}, @private1={0xfc, 0x1, [], 0x1}, [0x0, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff000000, 0xffffffff], 'veth1_to_team\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x1d, 0xfa, 0x4, 0x20}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@loopback, @ipv4=@multicast1, @gre_key=0x7ff, @gre_key=0x3f}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x39, @ipv6=@remote, @ipv4=@local, @icmp_id=0x67, @gre_key=0x7f}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40efd562, 0x2, @perf_config_ext={0x0, 0xffdfffffffffffff}, 0x57082, 0x0, 0x0, 0x0, 0x800000, 0x100000}, 0x0, 0x0, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x6}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:47 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0xfffffecc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80000) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x1) socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000000140)={0x1, &(0x7f0000000080)=""/47, &(0x7f00000000c0)=[{0x6, 0x94, 0x499137e6, &(0x7f00000001c0)=""/148}]}) [ 802.920294][T29020] FAULT_INJECTION: forcing a failure. [ 802.920294][T29020] name failslab, interval 1, probability 0, space 0, times 0 [ 802.936496][T29020] CPU: 0 PID: 29020 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 802.946160][T29020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.956993][T29020] Call Trace: [ 802.960704][T29020] dump_stack+0x188/0x20d [ 802.965439][T29020] should_fail.cold+0x5/0xa [ 802.969990][T29020] ? fault_create_debugfs_attr+0x140/0x140 [ 802.975874][T29020] should_failslab+0x5/0xf [ 802.980359][T29020] kmem_cache_alloc+0x44/0x740 [ 802.986437][T29020] ? __bfs+0x520/0x520 [ 802.990648][T29020] xas_alloc+0x330/0x440 [ 802.994946][T29020] xas_create+0x5a4/0x1070 [ 803.000132][T29020] xas_create_range+0x193/0x5d0 [ 803.005755][T29020] shmem_add_to_page_cache+0xa28/0x19f0 [ 803.011381][T29020] ? shmem_write_end+0x7f0/0x7f0 [ 803.016747][T29020] ? shmem_alloc_and_acct_page+0x392/0x980 [ 803.022705][T29020] shmem_getpage_gfp+0x759/0x24f0 [ 803.027994][T29020] ? shmem_unused_huge_scan+0xb0/0xb0 [ 803.035223][T29020] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 803.041687][T29020] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 803.047976][T29020] shmem_write_begin+0x102/0x1e0 [ 803.052968][T29020] generic_perform_write+0x20a/0x4e0 [ 803.058687][T29020] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 803.067200][T29020] ? update_time+0xc0/0xc0 [ 803.071982][T29020] ? down_write+0xdb/0x150 [ 803.076838][T29020] __generic_file_write_iter+0x24c/0x610 [ 803.082530][T29020] generic_file_write_iter+0x3f3/0x630 [ 803.088644][T29020] ? __generic_file_write_iter+0x610/0x610 [ 803.094573][T29020] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 803.102104][T29020] ? find_held_lock+0x2d/0x110 [ 803.109220][T29020] ? __fget_files+0x30d/0x500 [ 803.114471][T29020] new_sync_write+0x426/0x650 [ 803.119778][T29020] ? new_sync_read+0x6d0/0x6d0 [ 803.125978][T29020] ? debug_smp_processor_id+0x2f/0x185 [ 803.132104][T29020] ? rcu_read_lock_any_held+0xcd/0xf0 [ 803.138709][T29020] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 803.144842][T29020] __vfs_write+0xc9/0x100 [ 803.150096][T29020] vfs_write+0x268/0x5d0 [ 803.155039][T29020] ksys_write+0x12d/0x250 [ 803.159690][T29020] ? __ia32_sys_read+0xb0/0xb0 [ 803.164793][T29020] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 803.172278][T29020] ? do_syscall_64+0x21/0x7d0 [ 803.177688][T29020] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 803.185546][T29020] do_syscall_64+0xf6/0x7d0 [ 803.190742][T29020] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 803.198024][T29020] RIP: 0033:0x45ca59 [ 803.202059][T29020] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.226991][T29020] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 803.236464][T29020] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 803.246747][T29020] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 803.256585][T29020] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:47:47 executing program 0: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x121860, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x2, 0x1, 0x4, {0x10000009, 0x7fff, 0x102000, 0x2}}) r3 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000500)) dup2(r1, r3) fcntl$addseals(r0, 0x409, 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000100)={0xffffffa3, 0x2, 0x3, 0x2, 0x2, 0x5}) 10:47:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x80800) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:47 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xdbp\x98\xfe\x91\xfa,\x1f\x12\x95^\xdfstF\xcds\x00\x00\x00\x00\x00\x00\x00\x86\x00\x00\x00', 0x1) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='e4\n'], 0xb) 10:47:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 803.265426][T29020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 803.274076][T29020] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000015c0)=0x4) 10:47:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:48 executing program 5 (fault-call:3 fault-nth:3): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:48 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x879ae000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x74}}, 0x18) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYRES64], 0x5, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'ip_vti0\x00', {0x20}, 0x9}) syz_open_dev$dmmidi(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000d0", @ANYRES16=0x0, @ANYBLOB="000025bd7000fedbdf25130000000600b500950100000a0006006c703fcaa54c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20044000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01040000", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}}, 0x60) unshare(0x600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}) [ 803.671107][ T29] audit: type=1800 audit(1593082068.542:1058): pid=29047 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 803.711907][T29051] FAULT_INJECTION: forcing a failure. [ 803.711907][T29051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.736204][ T29] audit: type=1800 audit(1593082068.602:1059): pid=29047 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 [ 803.775000][T29051] CPU: 0 PID: 29051 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 803.787665][T29051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.801329][T29051] Call Trace: [ 803.805743][T29051] dump_stack+0x188/0x20d [ 803.810310][T29051] should_fail.cold+0x5/0xa [ 803.816157][T29051] ? fault_create_debugfs_attr+0x140/0x140 [ 803.822921][T29051] ? __lock_acquire+0xc6c/0x48a0 [ 803.828678][T29051] __alloc_pages_nodemask+0x17a/0x810 [ 803.836074][T29051] ? debug_smp_processor_id+0x2f/0x185 [ 803.844655][T29051] ? debug_smp_processor_id+0x2f/0x185 [ 803.851996][T29051] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 803.859956][T29051] ? __bfs+0x520/0x520 [ 803.866966][T29051] ? debug_smp_processor_id+0x2f/0x185 [ 803.874421][T29051] alloc_pages_vma+0xd9/0x600 [ 803.881672][T29051] shmem_alloc_page+0xb0/0x170 [ 803.888318][T29051] ? shmem_swapin+0x1a0/0x1a0 [ 803.895034][T29051] ? xas_descend+0x13c/0x360 [ 803.900648][T29051] ? percpu_counter_add_batch+0x123/0x180 [ 803.910847][T29051] ? __vm_enough_memory+0x10f/0x280 [ 803.917668][T29051] shmem_alloc_and_acct_page+0x160/0x980 [ 803.927701][T29051] shmem_getpage_gfp+0x514/0x24f0 [ 803.935089][T29051] ? shmem_unused_huge_scan+0xb0/0xb0 [ 803.941825][T29051] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 803.952657][T29051] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 803.960627][T29051] shmem_write_begin+0x102/0x1e0 [ 803.968684][T29051] generic_perform_write+0x20a/0x4e0 [ 803.976156][T29051] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 803.986863][T29051] ? update_time+0xc0/0xc0 [ 803.992669][T29051] ? down_write+0xdb/0x150 [ 803.999834][T29051] __generic_file_write_iter+0x24c/0x610 [ 804.007323][T29051] generic_file_write_iter+0x3f3/0x630 [ 804.014270][T29051] ? __generic_file_write_iter+0x610/0x610 [ 804.021625][T29051] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 804.031315][T29051] ? find_held_lock+0x2d/0x110 [ 804.038717][T29051] ? __fget_files+0x30d/0x500 [ 804.045149][T29051] new_sync_write+0x426/0x650 [ 804.055086][T29051] ? new_sync_read+0x6d0/0x6d0 [ 804.061197][T29051] ? debug_smp_processor_id+0x2f/0x185 [ 804.070796][T29051] ? rcu_read_lock_any_held+0xcd/0xf0 [ 804.078262][T29051] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 804.089574][T29051] __vfs_write+0xc9/0x100 [ 804.097139][T29051] vfs_write+0x268/0x5d0 [ 804.106259][T29051] ksys_write+0x12d/0x250 [ 804.111919][T29051] ? __ia32_sys_read+0xb0/0xb0 [ 804.120141][T29051] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 804.132142][T29051] ? do_syscall_64+0x21/0x7d0 [ 804.139153][T29051] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 804.146730][T29051] do_syscall_64+0xf6/0x7d0 [ 804.151818][T29051] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 804.160381][T29051] RIP: 0033:0x45ca59 [ 804.165209][T29051] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.194637][T29051] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.204051][T29051] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 10:47:49 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x2}}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x1000000, 0x7f, 0x3, 0x8d0f, 0x9}) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) 10:47:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x400200, 0x0) 10:47:49 executing program 0: r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x10081, 0x0, 0x0, 0x0, @time={0x0, 0x94}, {}, {}, @queue}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4f118eb", @ANYRES32=0x0, @ANYBLOB="6b4062de67995ec6e70a032626088d3e873b486bbe2fdc16e3b988755c811321eca6283bfc51b299b9626f75d983809d9cd9463b1d5442ff2bca155645e961a419e9cd458992ac363b903af529382df87cd217b3b7aa135af634457e23e62666ad14840a92cc06ce385f72a7dda2c0180199a36901f93595b4ceae4f6d5f"], 0x70}}, 0x0) r1 = socket(0x18, 0x5, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) [ 804.218625][T29051] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 804.229911][T29051] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 804.240897][T29051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 804.255881][T29051] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:49 executing program 5 (fault-call:3 fault-nth:4): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 804.474041][T29069] FAULT_INJECTION: forcing a failure. [ 804.474041][T29069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.486064][T29070] binder: 29067:29070 ioctl 401c5820 20000040 returned -22 10:47:49 executing program 0: add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40041, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000180)=@name, &(0x7f00000000c0)=0xfffffffffffffded, 0x100000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000000000090c5e0ffffffffffffff7ddca0756cfecec380d93d21c8a838bdfb20ecf15fc669a67ee682df355a85c0aa2a3bbc0d6c3f47b12ba73508a8a48cf945770a1af5eb34d53902e44b0afd"], 0x26, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x129640) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) sync_file_range(r2, 0x59, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000280)='/dev/hidraw#\x00', 0x566c057e, 0x400) 10:47:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 804.493384][ T29] audit: type=1800 audit(1593082069.352:1060): pid=29070 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 804.551703][T29071] binder: 29067:29071 ioctl 401c5820 20000040 returned -22 [ 804.598385][T29069] CPU: 1 PID: 29069 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 804.609429][T29069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.624017][T29069] Call Trace: [ 804.627652][T29069] dump_stack+0x188/0x20d [ 804.632643][T29069] should_fail.cold+0x5/0xa [ 804.637405][T29069] ? fault_create_debugfs_attr+0x140/0x140 [ 804.643702][T29069] ? __lock_acquire+0xc6c/0x48a0 [ 804.650165][T29069] __alloc_pages_nodemask+0x17a/0x810 [ 804.655754][T29069] ? perf_trace_lock+0xe2/0x4b0 [ 804.662039][T29069] ? debug_smp_processor_id+0x2f/0x185 [ 804.668559][T29069] ? debug_smp_processor_id+0x2f/0x185 [ 804.675364][T29069] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 804.685568][T29069] ? __bfs+0x520/0x520 [ 804.690887][T29069] ? debug_smp_processor_id+0x2f/0x185 [ 804.697462][T29069] alloc_pages_vma+0xd9/0x600 [ 804.702825][T29069] shmem_alloc_page+0xb0/0x170 [ 804.707972][T29069] ? shmem_swapin+0x1a0/0x1a0 [ 804.713035][T29069] ? xas_descend+0x13c/0x360 [ 804.717784][T29069] ? percpu_counter_add_batch+0x123/0x180 [ 804.723564][T29069] ? __vm_enough_memory+0x10f/0x280 [ 804.731043][T29069] shmem_alloc_and_acct_page+0x160/0x980 [ 804.737457][T29069] shmem_getpage_gfp+0x514/0x24f0 [ 804.745516][T29069] ? shmem_unused_huge_scan+0xb0/0xb0 [ 804.752975][T29069] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 804.758624][ T29] audit: type=1800 audit(1593082069.422:1061): pid=29070 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 [ 804.763948][T29069] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 804.763978][T29069] shmem_write_begin+0x102/0x1e0 [ 804.764003][T29069] generic_perform_write+0x20a/0x4e0 [ 804.764032][T29069] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 804.764056][T29069] ? update_time+0xc0/0xc0 [ 804.824633][T29069] ? down_write+0xdb/0x150 [ 804.830174][T29069] __generic_file_write_iter+0x24c/0x610 [ 804.837248][T29069] generic_file_write_iter+0x3f3/0x630 [ 804.843910][T29069] ? __generic_file_write_iter+0x610/0x610 [ 804.851447][T29069] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 804.860287][T29069] ? find_held_lock+0x2d/0x110 [ 804.865804][T29069] ? __fget_files+0x30d/0x500 [ 804.872720][T29069] new_sync_write+0x426/0x650 [ 804.878934][T29069] ? new_sync_read+0x6d0/0x6d0 [ 804.885687][T29069] ? debug_smp_processor_id+0x2f/0x185 [ 804.892568][T29069] ? rcu_read_lock_any_held+0xcd/0xf0 [ 804.899320][T29069] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 804.905489][T29069] __vfs_write+0xc9/0x100 [ 804.910671][T29069] vfs_write+0x268/0x5d0 [ 804.915359][T29069] ksys_write+0x12d/0x250 [ 804.920965][T29069] ? __ia32_sys_read+0xb0/0xb0 [ 804.928300][T29069] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 804.935291][T29069] ? do_syscall_64+0x21/0x7d0 [ 804.940584][T29069] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 10:47:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 804.949116][T29069] do_syscall_64+0xf6/0x7d0 [ 804.956028][T29069] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 804.963555][T29069] RIP: 0033:0x45ca59 [ 804.969278][T29069] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.992852][T29069] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.003163][T29069] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 805.013040][T29069] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 805.022069][T29069] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 805.032071][T29069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 805.040873][T29069] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x1, 0x4, 0x7, 0x8, 'syz1\x00'}) 10:47:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:50 executing program 5 (fault-call:3 fault-nth:5): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:50 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800d404000000000000db6900000079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0147bbad0a5c22a69150d1a3f9000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x11, &(0x7f00000000c0)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @local}}, 0x0, 0x3ff, 0x87, 0x0, 0xc1, 0x101, 0x9}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r8, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0x2}, &(0x7f0000000340)=0x90) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 10:47:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 805.289171][ T29] audit: type=1800 audit(1593082070.162:1062): pid=29086 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 805.314391][T29088] FAULT_INJECTION: forcing a failure. [ 805.314391][T29088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 805.422821][ T29] audit: type=1800 audit(1593082070.232:1063): pid=29086 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 [ 805.444183][T29088] CPU: 1 PID: 29088 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 805.455243][T29088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.467510][T29088] Call Trace: [ 805.471991][T29088] dump_stack+0x188/0x20d [ 805.476827][T29088] should_fail.cold+0x5/0xa [ 805.483396][T29088] ? fault_create_debugfs_attr+0x140/0x140 [ 805.490581][T29088] ? __lock_acquire+0xc6c/0x48a0 [ 805.497458][T29088] __alloc_pages_nodemask+0x17a/0x810 [ 805.504901][T29088] ? perf_trace_lock+0xe2/0x4b0 [ 805.511462][T29088] ? debug_smp_processor_id+0x2f/0x185 10:47:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) [ 805.518407][T29088] ? debug_smp_processor_id+0x2f/0x185 [ 805.524502][T29088] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 805.532265][T29088] ? __bfs+0x520/0x520 [ 805.537411][T29088] ? debug_smp_processor_id+0x2f/0x185 [ 805.543339][T29088] alloc_pages_vma+0xd9/0x600 [ 805.548432][T29088] shmem_alloc_page+0xb0/0x170 [ 805.554013][T29088] ? shmem_swapin+0x1a0/0x1a0 [ 805.558720][T29088] ? xas_descend+0x13c/0x360 [ 805.564581][T29088] ? percpu_counter_add_batch+0x123/0x180 [ 805.571439][T29088] ? __vm_enough_memory+0x10f/0x280 [ 805.579652][T29088] shmem_alloc_and_acct_page+0x160/0x980 [ 805.585757][T29088] shmem_getpage_gfp+0x514/0x24f0 [ 805.591937][T29088] ? shmem_unused_huge_scan+0xb0/0xb0 [ 805.598199][T29088] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 805.606954][T29088] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 805.615458][T29088] shmem_write_begin+0x102/0x1e0 [ 805.621173][T29088] generic_perform_write+0x20a/0x4e0 [ 805.627130][T29088] ? __mnt_drop_write+0x50/0x80 [ 805.632642][T29088] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 805.642080][T29088] ? update_time+0xc0/0xc0 [ 805.647995][T29088] ? down_write+0xdb/0x150 [ 805.653771][T29088] __generic_file_write_iter+0x24c/0x610 [ 805.660200][T29088] generic_file_write_iter+0x3f3/0x630 [ 805.667266][T29088] ? __generic_file_write_iter+0x610/0x610 [ 805.674381][T29088] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 805.681071][T29088] ? find_held_lock+0x2d/0x110 [ 805.687094][T29088] ? __fget_files+0x30d/0x500 [ 805.692516][T29088] new_sync_write+0x426/0x650 [ 805.697553][T29088] ? new_sync_read+0x6d0/0x6d0 [ 805.702664][T29088] ? debug_smp_processor_id+0x2f/0x185 [ 805.708624][T29088] ? rcu_read_lock_any_held+0xcd/0xf0 [ 805.715535][T29088] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 805.722552][T29088] __vfs_write+0xc9/0x100 [ 805.727911][T29088] vfs_write+0x268/0x5d0 [ 805.732909][T29088] ksys_write+0x12d/0x250 [ 805.737454][T29088] ? __ia32_sys_read+0xb0/0xb0 [ 805.744954][T29088] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 805.751371][T29088] ? do_syscall_64+0x21/0x7d0 [ 805.757299][T29088] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 805.764648][T29088] do_syscall_64+0xf6/0x7d0 [ 805.771627][T29088] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 805.778802][T29088] RIP: 0033:0x45ca59 [ 805.783220][T29088] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.806436][T29088] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.816053][T29088] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 10:47:50 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000380)="782123f6f39f67afbcb852f90757d896dd15bbe9fb7f1f582e24624229f964c70019408ce11c44d2a592586e275c6dfe05288b000eaa6bf1e513ce52eb66edb6d472de3fe9fd67e12818c6e16c5a64bf110bb3122439ff9ae65637d0da07", 0x5e}, {&(0x7f0000000400)="304fb9296db447c2ba5917b1acb186b90029c4206af217912e25bbc0221b170fd25aec184869db3168b40c7c401be42e8784932aebc2722a490e3a2b11d90e7cded1c1e107dbc8363743a1c0b8061717ae2e5bd0ebbde3669106aeafa826225d344675a4", 0x64}, {&(0x7f0000000900)="6abfac4e17abb34cad68f814c333377cec9964b0a9be4a884d4f255069d850e9d3328edc9c6c25c0a0f3b746d1005c36a5ad81a419ed21851a1d81b7660145f948e9808ece673e2c08d749722670c27507debc606df5848ddc80a5d4c0a6f46ac018558ea28c698557dc736414a85596754c3fa6575623a342aaa5dd2dddae0947649206d489dbc97149491989b3a642419d93337946fb6e36f5857108ab3dc09bb3ea9f6caca13b3f23c9b6091139f64e235246357f98bc23eb1d14d297c06dc1da5dfb417c590681fad2dece8871455abde073d808d6579c4449b96b27b7d2eb6a1d23ce6873d0b21a", 0xea}, {&(0x7f0000000a00)="cd14f813b17df5d5bb0c1f547423e644470d9bb19b74f1ef46282ea7fbf0da92d1cb117318ecd3b30f38bad073835662b4a686d7f371d64046572a6ad81a4a3735d53d184f636991e7725c717e9d85c272c946af340f7e9670600631d65eff475dc55740d07f321184eacae2c830aad15cf3a51db888891b53cb80cc860e07c6ecee9813", 0x84}, {&(0x7f0000000ac0)="74f987a03d62540c73968eb1a5e49a25ee0168182ecc216067453d668cf87bb2a8dde753eb943f3db9f16362fa93969b8a51ddd884f2de81f028046ce5fdf61499d073a15480afaad24ee4df88a6927aa3a37e9ee4aeec2bbf3d89a6818f2c48622f322d785f3abbdb366a9a5d219e4dce3dc8e7634f566df36ac29d28223af82b4926d70101d4d4c83815d7b36cc8", 0x8f}, {&(0x7f0000000b80)="42c6207d394350365e9ec9d75735130b5e370002e70822fbadfc7a27256813cef466415507ad412427d0d0e62d9de71a55d4093b99fb5212fd0b745bf0242197ff890a9fd96e717f5530d7b6e2be26bd92be3b774b035f6d472f16ed1e96ddc4d09732daddf4dd09d9e03e8268324866db19d0f1d677df16d5c2cba138f2fb99ba2894f5a826", 0x86}], 0x6, &(0x7f0000000cc0)=[{0x48, 0x115, 0x1, "af838862ac3e85500c874a1ae609f02b340766ae7b666a41b7f404900fdfba5929c69f27e592c4853a8b99a00255ca7ec8e4c45328"}, {0xd8, 0x6, 0x5, "498a8c19096d47d10b149601d23ef9a476c179c36f8179ac37f1541793c9abfedce8c15f19312b5d5112c2a7a4cd8466fbcbb8dee6012e63fa05b3feae3b4365b23d910bdb10a4207926d398b16d11df31d3e0b691944107ba5b9afd70e92691aa8a0f72d5f8f7123bed0afc055beb07eeb4971dc9660b11bcf251c6e02db753fe2e851eb67e1b07cc4ba7d2054feb3ab92c51ded42a7fba4802c0d2a6167fa10ab6313fa88490b0d3b059a979a09146f1ea3c0eacb454ed112e0ac9da6df62ba7"}, {0x88, 0x3a, 0x8a5, "16b85894afcbe528037f56cf3f98ce04b0ebb85cded9c2a2218422c9410f575b8fab4067318d8b167da520daca009228a2932dd2d4575ae1d98a3ec5ec3beb38df758d6bebf35f47d4d3ca86c63edeb992e439b6ff33b5d2e47440cd8cdf6971a12ff1bb6ab1871d9e115a48265b77176ed9e6"}, {0x90, 0x117, 0x2, "57a12dda28149e69504964b626afa56f36c8e49a893f6c8ebbedfc2e9e2958a8693a38d189e001f802dd9796203575e535452b33ed09c3895f56de3dbe7e8421f34c22f4d7d03871d654151de4df2381bbdd6386eb3ca03474d98127fae26d6ad4a19b7cc0f612637263d0546097014d41c3ce749a828ae58e20aac0c9490153"}], 0x238}, 0x10000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0x22}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/177, &(0x7f0000000280)=0xb1) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000040)={0x3, 0x1, 0x4, 0xc, 0x80, &(0x7f0000000500)}) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 805.824718][T29088] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 805.834488][T29088] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 805.844013][T29088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 805.852393][T29088] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) read$midi(r0, &(0x7f0000000080)=""/104, 0x68) r1 = socket(0xa, 0x1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, &(0x7f0000002640)=[@prinfo={0x18, 0x84, 0x8}], 0x18}], 0x1, 0x0) 10:47:50 executing program 5 (fault-call:3 fault-nth:6): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 806.072691][T29111] FAULT_INJECTION: forcing a failure. [ 806.072691][T29111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.101662][T29111] CPU: 0 PID: 29111 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 806.110869][T29111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.122895][T29111] Call Trace: [ 806.126380][T29111] dump_stack+0x188/0x20d [ 806.130770][T29111] should_fail.cold+0x5/0xa [ 806.136759][T29111] ? fault_create_debugfs_attr+0x140/0x140 [ 806.142790][T29111] ? __lock_acquire+0xc6c/0x48a0 [ 806.148464][T29111] __alloc_pages_nodemask+0x17a/0x810 [ 806.155340][T29111] ? mark_lock+0x11f/0xdd0 [ 806.161738][T29111] ? debug_smp_processor_id+0x2f/0x185 [ 806.167696][T29111] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 806.175652][T29111] ? print_usage_bug+0x240/0x240 [ 806.181264][T29111] ? __bfs+0x520/0x520 [ 806.185736][T29111] ? debug_smp_processor_id+0x2f/0x185 [ 806.192218][T29111] alloc_pages_vma+0xd9/0x600 [ 806.197712][T29111] shmem_alloc_page+0xb0/0x170 [ 806.203661][T29111] ? shmem_swapin+0x1a0/0x1a0 [ 806.209525][T29111] ? xas_descend+0x13c/0x360 [ 806.214717][T29111] ? percpu_counter_add_batch+0x123/0x180 [ 806.221744][T29111] ? __vm_enough_memory+0x10f/0x280 [ 806.228500][T29111] shmem_alloc_and_acct_page+0x160/0x980 [ 806.235210][T29111] shmem_getpage_gfp+0x514/0x24f0 [ 806.241038][T29111] ? shmem_unused_huge_scan+0xb0/0xb0 [ 806.247172][T29111] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 806.255790][T29111] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 806.262859][T29111] shmem_write_begin+0x102/0x1e0 [ 806.269203][T29111] generic_perform_write+0x20a/0x4e0 [ 806.277946][T29111] ? __mnt_drop_write+0x50/0x80 [ 806.283470][T29111] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 806.296378][T29111] ? update_time+0xc0/0xc0 [ 806.301826][T29111] ? down_write+0xdb/0x150 [ 806.307611][T29111] __generic_file_write_iter+0x24c/0x610 [ 806.314606][T29111] generic_file_write_iter+0x3f3/0x630 10:47:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0xff, @private2, 0x5}}, 0x7, 0xfff, 0x7fffffff, 0x1}, &(0x7f0000000280)=0x98) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r5, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 806.320657][T29111] ? __generic_file_write_iter+0x610/0x610 [ 806.327429][T29111] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 806.334298][T29111] ? find_held_lock+0x2d/0x110 [ 806.340240][T29111] ? __fget_files+0x30d/0x500 [ 806.345249][T29111] new_sync_write+0x426/0x650 [ 806.350184][T29111] ? new_sync_read+0x6d0/0x6d0 [ 806.356203][T29111] ? debug_smp_processor_id+0x2f/0x185 [ 806.362560][T29111] ? rcu_read_lock_any_held+0xcd/0xf0 10:47:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) 10:47:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf0}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 806.369875][T29111] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 806.375987][T29111] __vfs_write+0xc9/0x100 [ 806.381930][T29111] vfs_write+0x268/0x5d0 [ 806.387643][T29111] ksys_write+0x12d/0x250 [ 806.393218][T29111] ? __ia32_sys_read+0xb0/0xb0 [ 806.398765][T29111] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 806.405998][T29111] ? do_syscall_64+0x21/0x7d0 [ 806.411623][T29111] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 10:47:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 806.420256][T29111] do_syscall_64+0xf6/0x7d0 [ 806.426557][T29111] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 806.436394][T29111] RIP: 0033:0x45ca59 [ 806.440919][T29111] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.471060][T29111] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 806.484207][T29111] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 806.496169][T29111] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 806.514905][T29111] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 806.536797][T29111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 806.563871][T29111] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:51 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYBLOB="4883b8ecb03caa363b1bbe756dd3bb97d1a1c90bc6bbbf42948575122ef8f0a7c161d95b97aa831bcaad0790fb45c2023fc8c8f2d4f2af202271"], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x777}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:51 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x400, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='vcan0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x10132) fallocate(r1, 0x100000008, 0x0, 0x4000) socket(0x0, 0x800000003, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) keyctl$session_to_parent(0x12) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xd0}}, 0x40) 10:47:51 executing program 5 (fault-call:3 fault-nth:7): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x900}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 806.794724][T29135] FAULT_INJECTION: forcing a failure. [ 806.794724][T29135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.863824][T29135] CPU: 0 PID: 29135 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 806.873749][T29135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.884751][T29135] Call Trace: [ 806.888822][T29135] dump_stack+0x188/0x20d [ 806.893956][T29135] should_fail.cold+0x5/0xa [ 806.898858][T29135] ? fault_create_debugfs_attr+0x140/0x140 [ 806.905324][T29135] ? __lock_acquire+0xc6c/0x48a0 [ 806.910972][T29135] __alloc_pages_nodemask+0x17a/0x810 [ 806.917201][T29135] ? perf_trace_lock+0xe2/0x4b0 [ 806.922630][T29135] ? debug_smp_processor_id+0x2f/0x185 [ 806.928662][T29135] ? debug_smp_processor_id+0x2f/0x185 [ 806.934858][T29135] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 806.943353][T29135] ? __bfs+0x520/0x520 [ 806.948945][T29135] ? debug_smp_processor_id+0x2f/0x185 [ 806.956533][T29135] alloc_pages_vma+0xd9/0x600 10:47:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) [ 806.961744][T29135] shmem_alloc_page+0xb0/0x170 [ 806.967227][T29135] ? shmem_swapin+0x1a0/0x1a0 [ 806.972744][T29135] ? xas_descend+0x13c/0x360 [ 806.978533][T29135] ? percpu_counter_add_batch+0x123/0x180 [ 806.985365][T29135] ? __vm_enough_memory+0x10f/0x280 [ 806.990697][T29135] shmem_alloc_and_acct_page+0x160/0x980 [ 806.997521][T29135] shmem_getpage_gfp+0x514/0x24f0 [ 807.002895][T29135] ? shmem_unused_huge_scan+0xb0/0xb0 [ 807.010007][T29135] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 807.017170][T29135] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 807.024852][T29135] shmem_write_begin+0x102/0x1e0 [ 807.029839][T29135] generic_perform_write+0x20a/0x4e0 [ 807.036951][T29135] ? __mnt_drop_write+0x50/0x80 [ 807.042468][T29135] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 807.053018][T29135] ? update_time+0xc0/0xc0 [ 807.058745][T29135] ? down_write+0xdb/0x150 [ 807.064148][T29135] __generic_file_write_iter+0x24c/0x610 [ 807.072953][T29135] generic_file_write_iter+0x3f3/0x630 [ 807.079570][T29135] ? __generic_file_write_iter+0x610/0x610 [ 807.090125][T29135] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 807.096866][T29135] ? find_held_lock+0x2d/0x110 [ 807.106681][T29135] ? __fget_files+0x30d/0x500 [ 807.111825][T29135] new_sync_write+0x426/0x650 [ 807.118736][T29135] ? new_sync_read+0x6d0/0x6d0 [ 807.124531][T29135] ? debug_smp_processor_id+0x2f/0x185 [ 807.131805][T29135] ? rcu_read_lock_any_held+0xcd/0xf0 [ 807.139827][T29135] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 807.147712][T29135] __vfs_write+0xc9/0x100 [ 807.153653][T29135] vfs_write+0x268/0x5d0 [ 807.159229][T29135] ksys_write+0x12d/0x250 [ 807.164719][T29135] ? __ia32_sys_read+0xb0/0xb0 [ 807.170872][T29135] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 807.178510][T29135] ? do_syscall_64+0x21/0x7d0 [ 807.183595][T29135] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 807.190038][T29135] do_syscall_64+0xf6/0x7d0 [ 807.196304][T29135] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 807.203363][T29135] RIP: 0033:0x45ca59 10:47:52 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x2, 0x6, 0x1, 0x4537, 0xd, 0xff}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x6, 0x0, {0x0, 0x0, 0x0, 0xe, 0x0, 0x60}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r0, &(0x7f0000e6d000)=""/384, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000040)) [ 807.207906][T29135] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.228584][T29135] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.237030][T29135] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 807.245293][T29135] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 807.254716][T29135] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:47:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa00}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 807.263684][T29135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 807.274233][T29135] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x9}, {}, {}, @connect}], 0x1c) 10:47:52 executing program 5 (fault-call:3 fault-nth:8): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe00}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:52 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) [ 807.605427][T29161] FAULT_INJECTION: forcing a failure. [ 807.605427][T29161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.654440][T29161] CPU: 0 PID: 29161 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 807.664884][T29161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.677569][T29161] Call Trace: [ 807.681122][T29161] dump_stack+0x188/0x20d [ 807.686095][T29161] should_fail.cold+0x5/0xa [ 807.691187][T29161] ? fault_create_debugfs_attr+0x140/0x140 [ 807.697231][T29161] ? __lock_acquire+0xc6c/0x48a0 [ 807.702225][T29161] __alloc_pages_nodemask+0x17a/0x810 [ 807.707992][T29161] ? perf_trace_lock+0xe2/0x4b0 [ 807.713063][T29161] ? debug_smp_processor_id+0x2f/0x185 [ 807.718951][T29161] ? debug_smp_processor_id+0x2f/0x185 [ 807.725133][T29161] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 807.732184][T29161] ? __bfs+0x520/0x520 [ 807.736609][T29161] ? debug_smp_processor_id+0x2f/0x185 [ 807.742307][T29161] alloc_pages_vma+0xd9/0x600 [ 807.748213][T29161] shmem_alloc_page+0xb0/0x170 [ 807.755509][T29161] ? shmem_swapin+0x1a0/0x1a0 [ 807.760239][T29161] ? xas_descend+0x13c/0x360 [ 807.765291][T29161] ? percpu_counter_add_batch+0x123/0x180 [ 807.771699][T29161] ? __vm_enough_memory+0x10f/0x280 [ 807.777970][T29161] shmem_alloc_and_acct_page+0x160/0x980 [ 807.784400][T29161] shmem_getpage_gfp+0x514/0x24f0 [ 807.792227][T29161] ? shmem_unused_huge_scan+0xb0/0xb0 [ 807.797932][T29161] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 807.804579][T29161] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 807.810514][T29161] shmem_write_begin+0x102/0x1e0 [ 807.815504][T29161] generic_perform_write+0x20a/0x4e0 [ 807.820829][T29161] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 807.829081][T29161] ? update_time+0xc0/0xc0 [ 807.833798][T29161] ? down_write+0xdb/0x150 [ 807.838420][T29161] __generic_file_write_iter+0x24c/0x610 [ 807.844085][T29161] generic_file_write_iter+0x3f3/0x630 [ 807.850445][T29161] ? __generic_file_write_iter+0x610/0x610 [ 807.856472][T29161] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 807.862773][T29161] ? find_held_lock+0x2d/0x110 [ 807.867770][T29161] ? __fget_files+0x30d/0x500 [ 807.873044][T29161] new_sync_write+0x426/0x650 [ 807.877951][T29161] ? new_sync_read+0x6d0/0x6d0 [ 807.884317][T29161] ? debug_smp_processor_id+0x2f/0x185 [ 807.889828][T29161] ? rcu_read_lock_any_held+0xcd/0xf0 [ 807.895855][T29161] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 807.901534][T29161] __vfs_write+0xc9/0x100 [ 807.906228][T29161] vfs_write+0x268/0x5d0 [ 807.910507][T29161] ksys_write+0x12d/0x250 [ 807.914868][T29161] ? __ia32_sys_read+0xb0/0xb0 [ 807.919684][T29161] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 807.926114][T29161] ? do_syscall_64+0x21/0x7d0 [ 807.931007][T29161] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 807.937383][T29161] do_syscall_64+0xf6/0x7d0 [ 807.942100][T29161] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 807.948291][T29161] RIP: 0033:0x45ca59 [ 807.952406][T29161] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.972546][T29161] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.981357][T29161] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 807.990021][T29161] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 10:47:52 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:47:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0xf7, {{0x2, 0x4e21, @rand_addr=0x64010102}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8000000000, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) ioprio_set$pid(0x2, r2, 0x3) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf00}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6000}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 807.998473][T29161] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 808.007410][T29161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 808.017104][T29161] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:52 executing program 5 (fault-call:3 fault-nth:9): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7707}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 808.198207][T29182] FAULT_INJECTION: forcing a failure. [ 808.198207][T29182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 808.269832][T29182] CPU: 0 PID: 29182 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 808.280137][T29182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.291400][T29182] Call Trace: [ 808.294855][T29182] dump_stack+0x188/0x20d [ 808.300479][T29182] should_fail.cold+0x5/0xa [ 808.305304][T29182] ? fault_create_debugfs_attr+0x140/0x140 [ 808.311461][T29182] __alloc_pages_nodemask+0x17a/0x810 [ 808.319849][T29182] ? _raw_spin_unlock_irq+0x1f/0x80 [ 808.325960][T29182] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 808.333683][T29182] ? finish_task_switch+0x119/0x750 [ 808.339689][T29182] alloc_pages_vma+0xd9/0x600 [ 808.344799][T29182] shmem_alloc_page+0xb0/0x170 [ 808.350292][T29182] ? shmem_swapin+0x1a0/0x1a0 [ 808.355048][T29182] ? percpu_counter_add_batch+0x123/0x180 [ 808.361187][T29182] ? __vm_enough_memory+0x10f/0x280 [ 808.366880][T29182] shmem_alloc_and_acct_page+0x160/0x980 [ 808.373260][T29182] shmem_getpage_gfp+0x514/0x24f0 [ 808.379415][T29182] ? shmem_unused_huge_scan+0xb0/0xb0 [ 808.386316][T29182] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 808.393221][T29182] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 808.399340][T29182] shmem_write_begin+0x102/0x1e0 [ 808.405403][T29182] generic_perform_write+0x20a/0x4e0 [ 808.411819][T29182] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 808.420509][T29182] ? update_time+0xc0/0xc0 [ 808.425165][T29182] ? down_write+0xdb/0x150 [ 808.429802][T29182] __generic_file_write_iter+0x24c/0x610 [ 808.435661][T29182] generic_file_write_iter+0x3f3/0x630 [ 808.441406][T29182] ? __generic_file_write_iter+0x610/0x610 [ 808.447797][T29182] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 808.454594][T29182] ? find_held_lock+0x2d/0x110 [ 808.459841][T29182] ? __fget_files+0x30d/0x500 [ 808.465018][T29182] new_sync_write+0x426/0x650 [ 808.469745][T29182] ? new_sync_read+0x6d0/0x6d0 [ 808.474645][T29182] ? debug_smp_processor_id+0x2f/0x185 [ 808.480422][T29182] ? rcu_read_lock_any_held+0xcd/0xf0 [ 808.485977][T29182] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 808.491674][T29182] __vfs_write+0xc9/0x100 [ 808.496161][T29182] vfs_write+0x268/0x5d0 [ 808.501274][T29182] ksys_write+0x12d/0x250 [ 808.506535][T29182] ? __ia32_sys_read+0xb0/0xb0 [ 808.512396][T29182] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 10:47:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x7, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffff64}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x98, 0x0, 0x98, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 10:47:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = getuid() r3 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r4) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02080400"/17, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYRES32, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRESHEX, @ANYBLOB="04000200", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYRES64=r4, @ANYBLOB="080005", @ANYRES32, @ANYRESHEX, @ANYRES32=r4], 0x8c, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xfffffffffffffe50) mount$fuse(0x0, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000100)='fuse\x00', 0xa80090, &(0x7f0000000a00)=ANY=[@ANYBLOB="bf40fd2f9f6c472d92bc66643d", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d300ce6c6267b9f51973030303030303430303030", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000000000,max_read=0x000000000000071f,blksize=0x0000000000000000,blksize=0x0000000000001000,max_read=0x0000000000000003,default_permissions,max_read=0x0000000000000008,default_permissions,blksize=0x0000000000001e00,blksize=0x0000000000001800,euid>', @ANYRESDEC=r5, @ANYBLOB="2c6f626a5f757365723d2e2f6367726f75702e71fc1aad73797a31002c736d61636b66736861743d3514402f2d2e152c646f6e745f61707072616973652c636f6e030000000000000061646d06002c00"]) 10:47:53 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019034643db6ff4c79079bfa070c9", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x7, 0x1, 0x4, 0x4000, 0xb0ca, {}, {0x40b40b4151747efa, 0x1, 0xdb, 0xff, 0x81, 0x1, "922328cd"}, 0xd8, 0x0, @offset=0xc1e5, 0x1, 0x0, r0}) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) [ 808.519564][T29182] ? do_syscall_64+0x21/0x7d0 [ 808.524845][T29182] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 808.531381][T29182] do_syscall_64+0xf6/0x7d0 [ 808.538297][T29182] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 808.546545][T29182] RIP: 0033:0x45ca59 [ 808.551718][T29182] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.573448][T29182] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.584783][T29182] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 808.593256][T29182] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 808.602118][T29182] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 808.610271][T29182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 808.618635][T29182] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 [ 808.627843][ T29] audit: type=1800 audit(1593082073.143:1064): pid=29193 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:53 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2406000000bfa070c900000d0000000000000000", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) 10:47:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000280)=""/32) faccessat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x111, 0x1000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) sendmsg$qrtr(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000300)="3bf5d840b6c698fd5b5f0cb41c49c2e10aafd9c64a97cf72ed68e1d417e8aab9589fb773eb46486ecd1d0410547960dcf62c8f874cfe930dcb16037a2e69363cf8aedb0981ecfe47e5ac4827adb344aa6e8632e1486470d570d5ddd60443aba051e0c5a7f43ffaa2be861bd203dbd6df36d0ae49f7019b4d8de858078233706ec867ac78e81375cd41bc9c506027cb9ddb58764293ad688eef24511132fa92609da30500aaf6b21f66c68e36573f584a5ebd7f24e9125fbb7ea7344eaacc9ca0bcb7e3c12d82819b2809c10518a32aec3bd119dfe9da4e7053bb5c98ab472a1f94a12040b2c719e8fa698a504d40", 0xee}], 0x1, &(0x7f0000000500)=[{0x18, 0x29, 0x4d9, "84"}, {0xd0, 0x105, 0x8, "fd95cc54030dda84d8176f640be14a747dec6bb21afac73ef6efdfe0c58707aef504a090d74198d70166482e837ff6e7f3edd554b343a8293a2493ae023670b235aadee0f81efe87b0fdae7590046d2bc43b5c7b53634df42bb8d3bf07d02cb937a70d94c5e13691e44dba0d1a397ae82d1a3165aba06c65a0f0d1bb172e1266fa1937b237ce91ae23e55bd57145298fda648e473d5b92620345e9c38bad7f1ff98dae23a1846947e15dbc6c649d889c79e70d3cf4ac63b688c6effef787ab"}, {0x70, 0x103, 0x1000, "7ec680707b48c49410d9b19e2a41812d539cd70393122056e42a939317344e08061fb2241e94b2190e17a2da56ceb1fe4276f19626a67c77988712f53a2389af4f60792396061dce242ea8d1be45592aa0c16d3082fde0a03e7bc52bd6ba05"}], 0x72, 0x4800}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001900)={'nat\x00', 0x6b, "82a3fb880f746136e03ac16ae867b4144ecfc00e239e77cea412b425ec6f04cbf94a12e25f3fdc5c421f0a84bffaa70f4108db311b08f3f56253e1268bab8746b57da21fab7d861b8b6805eb439d679fc3f9b0bc21d784da9ab1d0a0649bae5bcf752a19e6620d7e97b3b5"}, &(0x7f00000019c0)=0x8f) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x269, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000040)) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x2}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @tick=0x1, {}, {}, @connect}], 0x1c) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open_by_handle_at(r2, &(0x7f0000000680)={0x1008, 0x6, "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"}, 0x2c000) 10:47:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:47:53 executing program 5 (fault-call:3 fault-nth:10): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) recvmsg$kcm(r3, &(0x7f0000000680)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x2}, 0x40000001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x3c441, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000140)=0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000000040805000000000000000000000000000900010073797a310000fad080ac18b65aa85c7be0fcae0000090000002f00000067e35d23114b165f43dd6447f4c621a97c3ce7f02a31eb4b532b18682dc23ee96f4329b06ae8c41571618c197e9b311174b67cc1710e4cfb79"], 0x28}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x408cc1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r4, @ANYRES16=r6, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0xdac9afec85e955af}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4c850}, 0x6f7fb779e95f70e1) 10:47:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000280)='/dev/hidraw#\x00', 0x53, 0x404000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000140)) 10:47:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400300}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 809.090287][T29218] FAULT_INJECTION: forcing a failure. [ 809.090287][T29218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 809.161551][T29218] CPU: 0 PID: 29218 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 809.170530][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.182102][T29218] Call Trace: [ 809.185713][T29218] dump_stack+0x188/0x20d [ 809.190269][T29218] should_fail.cold+0x5/0xa [ 809.195234][T29218] ? fault_create_debugfs_attr+0x140/0x140 [ 809.201256][T29218] ? __lock_acquire+0xc6c/0x48a0 10:47:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x200000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000140)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = dup(r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={r10, 0x0, r8}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$SOUND_MIXER_INFO(r8, 0x805c4d65, 0x0) [ 809.206468][T29218] __alloc_pages_nodemask+0x17a/0x810 [ 809.212148][T29218] ? perf_trace_lock+0xe2/0x4b0 [ 809.219350][T29218] ? debug_smp_processor_id+0x2f/0x185 [ 809.225102][T29218] ? debug_smp_processor_id+0x2f/0x185 [ 809.231065][T29218] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 809.238850][T29218] ? __bfs+0x520/0x520 [ 809.243154][T29218] ? debug_smp_processor_id+0x2f/0x185 [ 809.249051][T29218] alloc_pages_vma+0xd9/0x600 [ 809.254191][T29218] shmem_alloc_page+0xb0/0x170 10:47:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf0ffff}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 809.259094][T29218] ? shmem_swapin+0x1a0/0x1a0 [ 809.264679][T29218] ? xas_descend+0x13c/0x360 [ 809.269828][T29218] ? percpu_counter_add_batch+0x123/0x180 [ 809.276886][T29218] ? __vm_enough_memory+0x10f/0x280 [ 809.282750][T29218] shmem_alloc_and_acct_page+0x160/0x980 [ 809.288626][T29218] shmem_getpage_gfp+0x514/0x24f0 [ 809.294154][T29218] ? shmem_unused_huge_scan+0xb0/0xb0 [ 809.299562][T29218] ? balance_dirty_pages_ratelimited+0x160/0x1d50 10:47:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {0x3}, 0xde6f}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r4, 0x200002) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 809.306910][T29218] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 809.313499][T29218] shmem_write_begin+0x102/0x1e0 [ 809.319823][T29218] generic_perform_write+0x20a/0x4e0 [ 809.325851][T29218] ? __mnt_drop_write+0x50/0x80 [ 809.331048][T29218] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 809.339150][T29218] ? update_time+0xc0/0xc0 [ 809.343693][T29218] ? down_write+0xdb/0x150 [ 809.348350][T29218] __generic_file_write_iter+0x24c/0x610 [ 809.354034][T29218] generic_file_write_iter+0x3f3/0x630 [ 809.359801][T29218] ? __generic_file_write_iter+0x610/0x610 [ 809.365929][T29218] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 809.375546][T29218] ? find_held_lock+0x2d/0x110 [ 809.382477][T29218] ? __fget_files+0x30d/0x500 [ 809.389918][T29218] new_sync_write+0x426/0x650 [ 809.395967][T29218] ? new_sync_read+0x6d0/0x6d0 [ 809.401588][T29218] ? debug_smp_processor_id+0x2f/0x185 [ 809.409834][T29218] ? rcu_read_lock_any_held+0xcd/0xf0 [ 809.416557][T29218] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 809.422356][T29218] __vfs_write+0xc9/0x100 [ 809.428745][T29218] vfs_write+0x268/0x5d0 [ 809.433303][T29218] ksys_write+0x12d/0x250 [ 809.438236][T29218] ? __ia32_sys_read+0xb0/0xb0 [ 809.443342][T29218] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 809.452958][T29218] ? do_syscall_64+0x21/0x7d0 [ 809.458627][T29218] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 809.465770][T29218] do_syscall_64+0xf6/0x7d0 [ 809.474287][T29218] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 809.481787][T29218] RIP: 0033:0x45ca59 [ 809.487156][T29218] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.510102][T29218] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.518744][T29218] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 809.526988][T29218] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 809.535312][T29218] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.543397][T29218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 809.554248][T29218] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:54 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x127) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0xa1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 10:47:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x121600) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="03e5cbdfc0708c94f37d7e4e8a84fb79", 0x10) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @tick=0x1002, {0x1f, 0x2}, {}, @connect}], 0x1c) 10:47:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000000}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 809.755631][ T29] audit: type=1800 audit(1593082074.623:1065): pid=29240 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 809.822384][ T29] audit: type=1800 audit(1593082074.663:1066): pid=29240 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:47:55 executing program 5 (fault-call:3 fault-nth:11): r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x181000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x30}}, 0x41) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000180)={0xfffff000, 0x8, 0xce, &(0x7f0000000200)="10cfc997121135b58aeee4968ed321300a4f69af0b7c4264f945645a78d3b50552c893ddbd241e8462655094e42107243c5baa33ddf916aea294fa52f0884e282f20cb41f0b1dc5a8abdd36266db72ed863d957e901b38578f3ce2d50b30b868f5476e145166a2d1559ebcc612cc26e91db949506ee1553d416b8acd3936bf557a104f708b08b2871305f0bb7401077c7c7a7e84c0a17fdefee173432df7858be089407f42758674d78b697a8de425592139ff474b4387695c04328f2a1c823ec4f0bb001fd0bb582fa3c00f6188"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 810.195174][T29257] FAULT_INJECTION: forcing a failure. [ 810.195174][T29257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:47:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3000000}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 810.336870][T29257] CPU: 1 PID: 29257 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 810.349090][T29257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.366057][T29257] Call Trace: [ 810.371417][T29257] dump_stack+0x188/0x20d [ 810.379964][T29257] should_fail.cold+0x5/0xa [ 810.386985][T29257] ? fault_create_debugfs_attr+0x140/0x140 [ 810.395832][T29257] ? __lock_acquire+0xc6c/0x48a0 [ 810.401822][T29257] __alloc_pages_nodemask+0x17a/0x810 [ 810.412450][T29257] ? perf_trace_lock+0xe2/0x4b0 [ 810.418369][T29257] ? debug_smp_processor_id+0x2f/0x185 [ 810.427188][T29257] ? debug_smp_processor_id+0x2f/0x185 [ 810.434150][T29257] ? __alloc_pages_slowpath.constprop.0+0x2640/0x2640 [ 810.445960][T29257] ? __bfs+0x520/0x520 [ 810.451268][T29257] ? debug_smp_processor_id+0x2f/0x185 [ 810.459662][T29257] alloc_pages_vma+0xd9/0x600 [ 810.465139][T29257] shmem_alloc_page+0xb0/0x170 [ 810.471960][T29257] ? shmem_swapin+0x1a0/0x1a0 [ 810.478211][T29257] ? xas_descend+0x13c/0x360 [ 810.485320][T29257] ? percpu_counter_add_batch+0x123/0x180 [ 810.492517][T29257] ? __vm_enough_memory+0x10f/0x280 [ 810.501079][T29257] shmem_alloc_and_acct_page+0x160/0x980 [ 810.507031][T29257] shmem_getpage_gfp+0x514/0x24f0 [ 810.512733][T29257] ? shmem_unused_huge_scan+0xb0/0xb0 [ 810.518511][T29257] ? balance_dirty_pages_ratelimited+0x160/0x1d50 [ 810.525268][T29257] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 810.532358][T29257] shmem_write_begin+0x102/0x1e0 [ 810.537420][T29257] generic_perform_write+0x20a/0x4e0 [ 810.543447][T29257] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 810.552824][T29257] ? update_time+0xc0/0xc0 [ 810.558694][T29257] ? down_write+0xdb/0x150 [ 810.564771][T29257] __generic_file_write_iter+0x24c/0x610 [ 810.572513][T29257] generic_file_write_iter+0x3f3/0x630 [ 810.579969][T29257] ? __generic_file_write_iter+0x610/0x610 [ 810.590474][T29257] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 810.598842][T29257] ? find_held_lock+0x2d/0x110 [ 810.605391][T29257] ? __fget_files+0x30d/0x500 [ 810.613259][T29257] new_sync_write+0x426/0x650 [ 810.621995][T29257] ? new_sync_read+0x6d0/0x6d0 [ 810.628876][T29257] ? debug_smp_processor_id+0x2f/0x185 [ 810.637721][T29257] ? rcu_read_lock_any_held+0xcd/0xf0 [ 810.644474][T29257] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 810.651466][T29257] __vfs_write+0xc9/0x100 [ 810.656029][T29257] vfs_write+0x268/0x5d0 [ 810.662283][T29257] ksys_write+0x12d/0x250 [ 810.669870][T29257] ? __ia32_sys_read+0xb0/0xb0 [ 810.675393][T29257] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 810.684011][T29257] ? do_syscall_64+0x21/0x7d0 [ 810.690712][T29257] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 810.698642][T29257] do_syscall_64+0xf6/0x7d0 [ 810.704865][T29257] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 810.713497][T29257] RIP: 0033:0x45ca59 [ 810.718398][T29257] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.742389][T29257] RSP: 002b:00007f3be80b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.757972][T29257] RAX: ffffffffffffffda RBX: 000000000050db00 RCX: 000000000045ca59 [ 810.770826][T29257] RDX: 00000000200000cb RSI: 00000000200000c0 RDI: 0000000000000003 [ 810.783219][T29257] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 810.793498][T29257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 810.805182][T29257] R13: 0000000000000d1e R14: 00000000004cf758 R15: 00007f3be80b16d4 10:47:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "30980df39a97b5b3", "33480c39855cb9cedf38b385e786c52e6c2326225714b7efcd64fbae4adab42a", "e302fdf7", "44fecb2db9a6bdd6"}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) userfaultfd(0x80800) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x64, &(0x7f0000000100), &(0x7f0000000140)=0x4) 10:47:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4000000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000140)={0x809b, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[0x2], &(0x7f0000000100)=[0x7f, 0x9, 0x1, 0x200, 0x400]}) syz_open_procfs(0x0, 0x0) 10:47:56 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:47:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x118}}, 0x20048081) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000034000505d25a80308c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 10:47:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9000000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:56 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x3f, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) 10:47:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:47:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa000000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:56 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xf}, 0x200000cb) [ 811.648121][ T29] audit: type=1800 audit(1593082076.523:1067): pid=29291 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15782 res=0 10:47:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(r0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x275, 0x0) ptrace$pokeuser(0x6, r0, 0x80, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netlink\x00') r2 = socket(0x10, 0x8000000000000003, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000005) [ 811.730650][ T29] audit: type=1800 audit(1593082076.603:1068): pid=29291 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15784 res=0 10:47:56 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:56 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x2000) 10:47:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe000000}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 812.024897][ T29] audit: type=1800 audit(1593082076.893:1069): pid=29304 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 812.154592][ T29] audit: type=1800 audit(1593082076.953:1070): pid=29304 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 [ 812.570802][T29325] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 812.603754][T29325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 10:47:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='./cgroup.net/syz1\x00', &(0x7f0000000100)='./file1\x00', r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:57 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x3000) 10:47:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf000000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delneigh={0x24, 0x1d, 0x100, 0xffffffff, 0x0, {0x1c, 0x0, 0x0, r2, 0x20, 0x0, 0xa}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0xdd582fff60b7af22) 10:47:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @connect={{0x81}}}], 0x1c) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:47:57 executing program 0: rseq(&(0x7f0000000040), 0xffffffffffffff96, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000400)=0x6}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e000000214000300fe80000000000000000000000000000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) rseq(&(0x7f0000000000), 0x20, 0x100000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024000705aa9774ce06d46a5db12e093ed1875cc70000004007a2a30005000000e0f9ec48e0173c3a49376388162a8804d96a7045bafbfeb0eff4c24adbe0dd8d4ce1017857fb58c2e17aed5704338d985c9b10df25e163096db82b24fc9bc912c4661d04177a45c6", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00%\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00001000000000a5df0100000010d1f02c20ae25e1000f0000000877b61218345da6a63850729a6499f9000000000000"], 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002a80100027bd701cffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0c000e000600f2ff0600f3ff"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x538536668101e9c8) write$capi20(r2, &(0x7f0000000380)={0x10, 0x0, 0x88, 0x82, 0x8, 0x1}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000002c0)=0x1002000, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x20000040) [ 812.923200][T29334] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 10:47:57 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x4000) [ 812.980761][T29341] device geneve2 entered promiscuous mode [ 812.994634][T29334] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 10:47:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60000000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x20b284, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 10:47:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x77070000}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 813.205978][ T29] audit: type=1800 audit(1593082078.073:1071): pid=29355 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:58 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x5000) 10:47:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000001c0)={0x6, 0xd000}) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xa00000, 0x101, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x4, [], @ptr=0x10001}}) getsockname$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x30, 0x58, 0x0, 0x0, @time={0x8}, {}, {}, @connect={{}, {0x0, 0x3}}}], 0x10723a) [ 813.311351][ T29] audit: type=1800 audit(1593082078.133:1072): pid=29355 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:47:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9effffff}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:58 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x200001) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000180)={0xfffffffffffffff9, 0x4}) r1 = socket$inet(0x10, 0x80002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f00000001c0)=0x9) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a0007041dfffd946f6105000a0000e8fe020801000108", 0x1b}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f00000000c0)) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000040)={0x1, 0x200, 0x57, 0x5fe, 0x3f, 0xfffffffe}) 10:47:58 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x6000) 10:47:59 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:47:59 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x7000) 10:47:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf0ffffff}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:59 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x84000, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000640)="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", &(0x7f0000000040)=""/168, &(0x7f0000001640)="751fca575c62606e1046d8dc7642639175d9a153fedfe66fd1d795e28e0db67995b3e73f1cd7e18574b29d7bb66731b857e470400da859391606329018df02709650586abf7f5ff2cee8ccb1e48903c3fc9c0fd6efc2727f6f9503a702567e735d0841ad33bb0f8008a957248990a31cbc4ca33b4b2ff4871d98dadd31c7a1f9e908517d54f60ff433b8b03ab68a127880565dd8127ccccf0aaf816f18cea48e47b3b37e13126de7da9e098f76892ee21a45539c920f0035ef28369d4486326a260adfd256e680611d59623c0323e2c7d96bd7732b48ef493a52fee6bd8f5f06e2f4cfd073fd5bd1e9c60dfc80f2521f770a40a78fbfb5e23276ef6b2250069796d606abc411868bf8b001fad7e6c30fda29cc9be7f9d45ec6f8d2985141420f7ebc5730a4a99403572fcbfa866d0d39778045715ee475ee114ae651f22fe8205464193cc963f89b9930a9ffbaf0d67ad5f4817a19d4e5552dec9fcec6b5e07b2b9ceb4cbcb55652c8d58d2d7b08fd96f0af45295c26a65175cfd842edec6b4d420ce8513dca08c36b8dc7577687557e12012dd8fa620aaa01996187029544c7d58f067c2b8428fb57c2bf9206df314c5a96b1a4644cca1ecc77bd62a529d56c198cff66c004830a4b266e0f78fa3f4fdf86bfbcddd0eba8baac8711214baad519eeca13f7af4c3e59ac3f8711fe16e423ca93e9ab2277d70ab4996f2dbf34ea56bcfaf191e70438a8e464ef2c9d00ea3f2956bd5a5ad22297efef646108377bbc69f8bb3e97d151f7657905099aac835e367802664c4024cda7cf811e8aadabd34fe13d54e1b4d3f303773e5a01e58247c585ba1121b8a3ce197c5205f1394b999f4bdedd7a43f69c05c8161129465655ccefe92ca22527295db71c3a32819249d8ef61003eab1a03134a8eaa1fa4c332b24df6fa97041eca9d1ddf3678f7ebcf6a6cec585954d892cd4b451005594164e566f53f9d0497915b69c2e984528f559c44e45f74ccd3c7249b47f3484691b8bcc74a95b48ca0a22603a0d719f42958310413b3ecc41f616be73e9c34c32a2c77c6dd8fc37e57eeda1b5855b68c5e98d748a6fb1909527513430ff85ba14e30aa588c00911cf360de81a8765e0827f51efbaca3dbbcef7bfa2cf28843cf11e794dd24042ee10ba3f64b379569a08f782e07ecffc21e29ebdba44f7371aa24b513f771fc09c4e74ae36f998f61997c594e7049cb98adb054cf145338c9001375663a32d7b1d80aef6e9d19575438c513acfd9392c0a57c57f5573e89486bf9138f494d46762cbc65ea643cbe923ff8274bef1759f3329d4f749dd8d00df2cce050e586c13daf82c4329c11fbf18084dd4f3122ab95efcc6c1e88e5cae61a423f9ac5a00a05c541a3a06688345e96889ea10e05159d78f72d697d7a272c98062a850afe75bd96c6b8c3f2e9d3e0fb99ba32f4f162b7bfd619ae6d21378702e6f4497bacf2c538d5c93376e939cdc7bbda30101891839b681acfeef9a3b5aee7adb5dbd97c8f84779c030c4e3d3219e9ffb1a7d4d4516c3ab7e37d5d35ac4ec4590b17b30e769928de844ad10ea75c00e1b004885901416ccbaed29c378f4cd8a5af0bcba49eba45a04334755b6f44bd7c6d2178caa803cf6f6974a7b404d897fb8bae64e0d3e57324277676c836f33e49f5cd9d2ffa491fc0dd28bf3da41587beac060138129600b7cbc6a2c909588c6c2b2fc30005344b888d49ae3a4148d651cc395dc5d0bd192a243ac3174c78641a2efcc6deb620c954ed2f10a7d821c93bec97099c1abc42954b49b3f31e18677197726258ca962994030803ee2d225f7e2028338f664f5031837056a689165783392edb20bf99fffa647a69327f5f8077a27aa5cd1d243e8e1e6fc61397df0619b1c88fc541aee5e28441a882015d4661c68f369852a85a15d33bd313c10ae69ba2b212cc17c90f3b2193422db0f68cab3a3c041a76f5a24b4c5748fa3fb641f7a05bafa7618e363fcc36bcb92b802b51599226a7acb4a6c5bba00a11549450c50378ad26fefcd04ec876e9e8725ba9524066caa7f3e193032f77b820d6206ed52ff5d299e6c2ebd0cb1efe6bc91dcef2a65d0774d80f23ba25a6a10273065b824e5fcb1e6b4d140e8262c30c83458cf4637c423c0b7386b3b92aeda2e7d148152a03f1fcceb70bb6322419c0e6ebf8b8561d349f074d5b5c311403f56fb200afb043d3c87e32bc6eb9683a3cc1cc55f248d939e1e6013ca060edaec7c908fd2286a89043451552a80b9896f2ac9d0a8c23b03e4d5c0866a8d56d15897d9b177855b8f1ed5728c20882f4735a16a8ff30174fa5d804ed9242b20bcd10f46bd1bcbb53ce88b5de0f713a46fafea92764f6d27ad83e2bd82a394c1b74eed31580ddf82e667713e76b894318d6b65f19ee5bddb68624c026da549999849044733c5a56c8bfcbe960ac42d5cbae476cafc51de0fb9a70542b632f04417a6daf879a3b141f28af77a87f8c2ecd5ba5da0b02e730b3409f04de723b84f82bf900c28e81c101ab3d862b3464dc786892b76e90f41b2b3c0493cf6fd67cd4ed2319725723e7191e3ad452d5e8a5df4f453d4504cce80e09a485985de0a87d8086b525e684ee0fb8ef02af562acf719487e89243e9ba9044aaff87aa9df1bf8bb50b140ea1ff850809e3869d6ab1d85c42acdd1938a08947573ca8594579d89bfd706e2b385ef270647204e7f6bc1b3d4c6f75e374376120ecacf46c2de1005a92ddaf4016bf623f1aec11bbae7af59d764c1977466d2ec6b8206efc3ec5162c97c045b4900eef839dedcf62fce8dbc73587d01e76965be235c08cabf9991ec6eefeaea666788fa2fbfe8a6a3065c0fba6eedbd8f4cd3ac6d4641e6e3b2d39deaf3a2ad1065fdeda3e9bd42d3ab26ee19d54a914cee88ba99f1f192e64db94983fb22644bfeaeec522c77e9f3bf57a40b741e764fe81ef8ef64af70dfb8f46e1c34b98c8532cb42c74f29aa7df426b8904cb41194a00314bc46388630f54bd147c5831a76eedac8c13620a3edcc10b8072a103cc65bf342510563fe2ce7fb4ceccf5ac8cca7c7451c68af91613aeb3155cc9c660741297d35666aea447e46be306556d986a1cc7a46601fe9c77c678f30630e83c64c7feaf9b2353b9901c8f7e1b116392ccfe5e1c1ee1e2777e3339704240bf75cce0b3c8878a80121408b5ecbba0588cdac965e49814cffee640941c701563a579e051cecdd329c4b74bdaafcfbb6eb9d12233b2dabbcfa7b15303ef3ec92886aebde5039a647629c6d437ff251191046b97a85793ffcc5c042f89dc05ee784324bb845e1a4d2aada37c70e8ef3edb23791ea99e069fc9843bc8eaecbcce4e80f9066c53305364d62cd86d6589c65ac3db4cac6ed2ef97ed3f87bd4fcceae925c39a29b020e2d1e1bab1af2f9ae4f927b47fdd6ef9622b2788adcef90b12f97975d88519d75ee7d9bf902f3aca81b04a4e83cb87d506bcd974b979f3cb99985752fa6072a4edac9c8e37522dfe1b3e893be9cf079322c0be6b6978d22bf82b9c335545b659c63b27f057ce36e0b06cf8d4be50183a8c7177ce2f45025c3183ccc43cea51918d80fddfe79a26fa20567964dc206cbbdf8fd83eace850fbe832b42600e9ecd249b70e6dc7809baf837eb8949d4083f16ac67312a29b6c86f530079ac77ade171fabc5f522f678dbb395dfbcb45d7f5da5b85a13647816d6cb17cff1b3e57d03240d04b175a79a26e69f55dfd7e0abef05809e899ab90bba33db29ab67f64b8dec1efbc8d420fc02f22fa810b1604c779f820cd735f167708149f7a8a30ed3b8f07027b6cf8f9245a3da4ca52904f90b7205c71c2b1a33060b9bfb4b80cf8feb5e69cc2d32cdf54bfd400744ff8773d4ae2b895e9ab7c4cf02e8a448700fdf5ed2058f3d1f3745c7d784f519a7a70b4152dd4fd6a46c2b00a711e10a6c92a77ee831b95b3a124c57c9caede88be150529029f8c357daa056e25cba41638bbc8f0f9920f4ce2b03625f7bffb3851c07ceb4c03642a637c2db6ff94a984865c80d717cdb7bc78e570dde820bd100ac12f2e71d91058a3e668d3e590fc00e822b5386696fa6ed1347d24485e8f22565bf39d3ccbe58b464e5634f6d4d12c5db7a0f662f4773c099de1d4b3747c053be894b5948222b52b026eb7a35546394107a9aa24c2689471ee1a64ca5c215524214738275acefa0bc4b609424d352127c354d6f48319f8990a3fa60cf7748f7eea27f824ba954eb8199e0342204a26eafa756a690e63a0ec951a8c8299c2425de08428af98d3c0c194357c050facd9ec17e6a282c9ce005de36adb0f16065d6f468ad3bc2a572d42ddee5f0201de849fd853efe2cb82f1585d8bc956b98a4106b1fde4fcd04896da156fc8efbae55f93b76cd0adcb18e11dd18734768cd08e9619f547fe84b0bc1caeb8990ab4647bb513da072e4fd79a0b03886e4b8bdebe07a3d0ae25fa81c8f3e0e3005f9abe9db123808f1e13a85d84f1469e10702eb5248cce5d6d942e90f2c20d44d53d20e3a31d5a8f61f3d4422ca8bda8059f208c1146d1f52fd608a015ef4adbd1b9676fad0463980862621973ae33200e904ab32bd6c3bcd0ed1cc58954bd7d6897ade3e437c8e9d7e147d74e7848c0fdd32b502ba2746d8b3671c2c753ad3f1bfd14032f997f9b2b1b05dcc9f5fe6310df623d298ccf070ef48c7fa39e44248ac3ce03565dfc61707f0d740c979db26f7651c6fbcd2336a888b52e7d954daa43ab408b3f0c9f1e3df0b24c1b2692e81841556fd047cc9ab59b255fa3cddbf852873399b90df88853843851d0e21b4537e93d2280ca4cdca6aa8555341071ae39ff921779c094da30254774793a16dab05ac3106e2e0ecc92824e0bd9b2a84622ba04b511a563e61b1550a786639fe575924d2bb4d23bdc68825c7838958c9339019008bed68f489c2a34e9d49303932a60ebbdcba0919053fdfda857d9d32a04efcc986adcdd26b1482926637b3960e1d4acd9cc78fd6d6bfa9662d9bd2fec16341c7c57c55c993ff3caf3a0d1b8678b4d52483466d196e5ea1511918fff40b045f09a008e63c39a28fd2589d344411c0f434cfd7e46112c05bdb59d9aaaefe2a9ad3cc161378c351c2991c39811c04405edae7bc3354eb711c183d040a2a7f7b51b4177c6fa5f54739b83331e98eb0e58d492d033d1b4b2bab18b3fcf311d57067dcd0ad4aa3fa829abdda2cfd9d867b44098c967a591aa78cc1199d8f2f695a5aa56c7cb0eac97ab635bed50e72ec30348aacf16fd627acbc17d463f0caa99da0e024f8ed96a2c401c578bc103d82f17cfa7ac9f74b5331de338dac793633de8fe9cd14c3fbfa3fc5b72a99e67f3aa23a4e125392a4acadfe91be860b01eae12c84fe727085f61404cb30b9755358b36c03dc339ca8c6f3893e0d2ebad9a20f2ad0f4c980eda09580398bfc4a00dd0faf91c70c44b34b0b6ee767a3740ace8c9e32774b6582df263dd0c2dd65b98c31e09c8ef35deb2b2b6def0f560c73dcd58190d37eb6e5069ccee8b79deb3b37769e244de46cdf953d0f33f21774323bedc5c3ae0dca54223b03ebe22dd81a093a8dd699a2e1b52b85d581962f07a1d73a84f8fa55885e3826cc4e7482cc10b37eb057aae9455b447ccfb1719b95939b5f6acf1a8c7af50f6b32da25f51843493d70c9ecc8c5b8004a19550780d7f3dc7b12f39684169b4ea7a926c62e19253be00f95cbae018c231f208252551e49aadaed8b696992f45502b776f8f885625a0eb3", &(0x7f0000000180)="2f370e1bdc88558983a9e371b4f7f04427256b6a4227873e68ed80b0cb078afde386", 0x5, r0, 0x4}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x74, r2, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}]}, 0x74}}, 0x0) 10:47:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="c6447accc7d1ec57413183fad128d2f3efa67d698a02b6b739e6575444b55f52490962ce", 0x24}, {&(0x7f0000000300)="ec5b3bf7166ddec1c938e30969424726880ca070fcab48135344ce1e241dbca87f44632d95eb4a5e06cc68ae8434e8400786eb9465fa0e36786259cba960fa90d45036", 0x43}], 0x2, &(0x7f0000000280)}, 0x8000) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800, 0x10}, {0xfffffffe, 0x6}]}, 0x18, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000140)=0x1000) 10:47:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffff000}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:47:59 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x9000) [ 814.920682][ T29] audit: type=1800 audit(1593082079.793:1073): pid=29392 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:47:59 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shmctl$IPC_INFO(0x0, 0x3, 0x0) r1 = socket(0x10, 0x800000000080003, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000001c0)={0xb, 0x5, 0x2}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', r2}) dup(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000200)={0x3, 0x80, 0x1}) 10:47:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet_smc(0x2b, 0x1, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:47:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff7f}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:00 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xa000) [ 815.209096][ T29] audit: type=1800 audit(1593082080.083:1074): pid=29404 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:48:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff9e}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 815.352500][ T29] audit: type=1800 audit(1593082080.113:1075): pid=29405 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:48:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:48:00 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb000) 10:48:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) memfd_create(&(0x7f0000000100)='^-\x00', 0x7) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x3, 0x1, 0x9, 0xbb, 0xfffffd9b, 0x6}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:48:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff0}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:00 executing program 2: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@can_newroute={0x14, 0x18, 0x7c02fdfad0c848e5}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x50a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000000) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000200), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) 10:48:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:00 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xc000) 10:48:00 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x41c3, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/vlan/config\x00') ptrace$getsig(0x2, 0x0, 0x0, &(0x7f0000000300)) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'geneve0\x00', {0x1}}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) r4 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)) setpriority(0x0, r4, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xa0840, 0x82) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:48:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000600)=[{&(0x7f0000000040)=0x2}, {&(0x7f0000000100), 0x1}, {&(0x7f0000000140)=0x1}, {&(0x7f0000000180)}, {&(0x7f00000001c0), 0x1}, {&(0x7f0000000280)=0x1, 0x1}, {&(0x7f0000000300)=0x2}, {&(0x7f0000000340)=0x1}, {&(0x7f0000000380)=0x1, 0x1}, {&(0x7f00000003c0)=0x2, 0x1}, {&(0x7f0000000400)}, {&(0x7f0000000440)=0x1, 0x2}, {&(0x7f0000000480)=0x2}, {&(0x7f0000000500)}, {&(0x7f0000000540)=0x1, 0x2}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=0x1, 0x2}], 0xd, 0x11, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d19, &(0x7f0000000780)=0x5c) 10:48:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:01 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xd000) [ 816.201958][ T29] audit: type=1800 audit(1593082081.073:1076): pid=29444 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:48:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 816.525766][T29441] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 10:48:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:48:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) read$qrtrtun(r1, &(0x7f0000000340)=""/30, 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000280)={0x100000, 0x10000}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x10001, 0x3}, {0x0, 0x7}]}, 0xfffffffffffffe0c, 0x4) write$sndseq(r2, &(0x7f0000000100)=[{0x0, 0x0, 0x9, 0x0, @tick=0x85, {0x0, 0xfd}, {}, @connect}, {0xfd, 0x5, 0x1, 0xb6, @tick=0x2d5f, {0x5}, {0x91, 0x8}, @result={0x2, 0x1}}, {0x80, 0x2c, 0x9, 0x82, @time={0x10001, 0xffff08d6}, {0x9, 0x6}, {0x0, 0x4}, @addr={0x9, 0xff}}], 0x54) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000300)=@gcm_256={{0x304}, "8b5bf5d124a19a0a", "8a7fe71cfcaf81164222c77217e2c071cba669fc140498d4b66e91b06c792eb6", "ecab6339", "04079240acfc31e9"}, 0x38) 10:48:02 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xe000) 10:48:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r4]) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000140)={0x23, 0x6, 0x0, {0x0, 0x2, 0x0, '\'['}}, 0x23) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001003665746838c8be6d21daea3158ed03bce9badc35ea82f60bd4f0c75776d79e48d54657563fb0026dc3650b71396c5a6cc7e8109713405a92dc05dccfa22ad244452b7f9952005ff22fcffa28f61dc5c3c63226a8576edd44d6e29a2c39a61eb161933e329e092e2e3628765b3d27f4db3c36def37b8c879c6107a8d705306beab5ad3b"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000ffff00000a00010062617369630000004c00020048000400080004000000e2003c0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005", @ANYRES16, @ANYRESHEX=r3], 0x84}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7) r6 = socket(0x1000000010, 0x80002, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f00000001c0)=0x10, 0x100800) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000003c0)={0xffffffffffffffff, r0, 0x2, 0x1000, &(0x7f0000001580)="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", 0x80, 0xf4, 0xfff9, 0xdcaf, 0x4, 0x2, 0x3f, 'syz1\x00'}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 817.971882][T29480] fuse: Bad value for 'fd' 10:48:02 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) [ 817.993527][T29480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:48:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xb3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/194) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:48:03 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x8800000) 10:48:03 executing program 2: r0 = gettid() ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0x0, 0xf01, 0x2, 0x8}) r2 = gettid() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f0000000040)={r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}}, 0x890) 10:48:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x9}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 818.200651][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 818.200664][ T29] audit: type=1800 audit(1593082083.073:1078): pid=29491 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 818.328294][ T29] audit: type=1800 audit(1593082083.153:1079): pid=29491 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:48:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xa}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:48:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x40010, r0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xc86f650211944a96, 0x1, {0xfbfffffffdfffff9}}, 0x18) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa16, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000500)) r3 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r4) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000001013e07000000000002000400", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000500", @ANYRES32=0x0, @ANYBLOB="08030100", @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff01283b7be59dc38a7532e02a2f3716d68bdac0393ace66ec4a5648194dafc77d424bbfb2f317e4c1988025de5a3103ee719eed2acdd0da01d4ba85749b5629761723138f24f855c51fb7bf60c730595be848643b60f1d45a33fd5f062c83", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESHEX=r0, @ANYRES32], 0x8c, 0x1) fchown(r2, 0xee00, r4) 10:48:03 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x4000018b) 10:48:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1800, 0x3, 0x800000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1d8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000002c0)="010000000000000018010000") socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200c0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048048}, 0x448c0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x0) clone(0x1412490c, 0x0, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x703000, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0x2e, 0x5, 0x13, 0x9, 0x1, 0x8, 0x5, 0x5f, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r4 = dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000180)={0x0, 0xa75, 0x2}, 0x8) 10:48:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xe}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:03 executing program 0: epoll_create1(0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000003c0)="64660f3880a7000000000f00589d66b8aa008ec8ea7b9e93222f0066b836008ed0b9800000c00f323500800000f26fd8c70f0d27362e660f3881492fb805000000b9000000800f01c1", 0x49}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="00000000ffffffff0000000008000100746266002c0002002800010000000000000000000000000000020000000000000600"/64], 0x58}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) read$hiddev(r5, &(0x7f0000000080)=""/9, 0x9) 10:48:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xf}, @in=@multicast2}}}, 0xf8}}, 0x0) 10:48:03 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x5) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) [ 818.844802][T29526] autofs4:pid:29526:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 10:48:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x60}, @in=@multicast2}}}, 0xf8}}, 0x0) [ 818.947269][T29533] autofs4:pid:29533:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) 10:48:04 executing program 2: socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x4}]}) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, [], 0x1}}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r3, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 10:48:04 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="2e10010300000000ff020000000000000000000000000001fc000000000000000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000078f1a7e8ffffac1414aa"], 0x88) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2321202e2f66696c65300aabc619077f0edb4115a733ce1f6b1718b2ea9e0355bd835cffe2621cceeda829c5f640888c9f38ee968022adef05041649895bab937e8c5b479c60a7ee214120c32c9e3d2a61846418198765bc68c00c4b25d700d0105bf7985d33dc2352e5a64a8ea5449b087a75cbe0dd60f471bcfe835252dd9a9af7518437607791f5d24bef73"], 0x200000cb) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='cpu.stat\x00'], &(0x7f0000000540)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='%\x00', &(0x7f0000000440)='\x00', &(0x7f00000002c0)='d\x00', &(0x7f0000000480)='/F6w\xf8\xa47\xf8\'B\xb2\xd4]\xee\xc9\xab$,\xc4\x1ap\x1d\x10\x8co\xae\xbdGS\x13xH[\x05\x97j\xd0 \xf4:G\xf4\xb0Z\x13\x86\xde\x1f\xe0\xad\x19~\xfe\xfe\xb5Z\xaa3\xca\xa27\xd4\x88\xbbH\"?L\tv\x8e\xd2\x84\xb2\xbd\xf3\xe8E\tiY\xebV\x9c*\\\x04\x9ev\xb5Uqc\n\\\xc1\x87\xd4\x9b\x15a\"_\'\xbe\x05N\xa41\x12`sPI\xfc\x8dQ\xbcA\xa4\xb5t,\xd4\xa8\xa07voQ\x1e\x8aD\xed/2u\x80z[\xf8', &(0x7f0000000340)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', &(0x7f0000000380)=':/\a\x00$-+&/$\x00', &(0x7f00000003c0)='#! ', &(0x7f0000000280)='cpu.stat\x00', &(0x7f0000000300)='#\\\x00']) 10:48:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x2}}}}, 0xf8}}, 0x0) 10:48:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:48:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000001000040025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0xc090) 10:48:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x3}}}}, 0xf8}}, 0x0) 10:48:04 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x4) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:48:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @loopback}}, 0x1e) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) r3 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000500)) fsetxattr$system_posix_acl(r3, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08030100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYBLOB="68d4b80200b5d506", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="08000100aa1f6a5e6af21de714b842156003110e39808cfc9684c7e0ef8b1ed8046dca9710c0a9615efbc3c269d300c1ec4966fbac5204d86d5ab5d0fb00dbeb5925fb5ce578ce461319b7a926214574f492156d991115d31c84153c1304ff", @ANYRESHEX, @ANYBLOB="08000200", @ANYBLOB="db3042bbbf62755c42cf71297348833cde4adaa27c78459079feb1ce89bd19b5ee2078f517e923d0bc9015a8a8ec22c5d07fb76daf47ecc366", @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYRESHEX, @ANYRES32], 0x8c, 0x1) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x80) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000100)={0xfffffff7, 0xffff, 0x49078b6e, 0x80, 0x800, 0x2, 0x7}) write$tun(r0, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0xfca) 10:48:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x4}}}}, 0xf8}}, 0x0) 10:48:04 executing program 5: r0 = memfd_create(&(0x7f0000000200)='y\x045<\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\x00\x00\x00\x00\x00\x00\x00\x01=,~F\xcdsq\xc6Nc\xa18y\bp\xf6N\x1c\x93\xe3\xef\xf8\x04\x15(U\xff\x83\x96\xda\xd8\xf9\xc9e\xf3v/EM\x82\x18\xa0(*|\xa2\xf1\x9f\xc6\x03\x06\xe71\t\xfa?~\xea\x99R\xd7\t\xed\xd4`\xb1\xe2`\v\xa2(\xf4\x120\xc4H\xdd\x1dfZ\xc2\x17\x86~Uy\x81*N7<\xa1\x16\x89\xb6\xac)v\xa5\xc4\xf4\x9b;?\xb7\xc9V\x92~:\xfc\x83\x84\xcc\x81e\xe7\x1a\xa2\xa8\x9b\xef\xca\x81\xad\xffg\x88\xa4\xe2}\xdf\xfa\xef\x97\xbc\x92\xec\x19\xf4\xde\x10\\\xe9\x1d\xc2\xa3n\xfa\xaf\xa0!`\x88\xac\x1b\xb7V\xf9 \x05-\v\x01\\\x0f\xfd7\x15\x8b\xeb\xd7\xf5|\xac\x1er*\xbf\x13F\xae9\xf5\x10V\x00\x00\x00\x00@\x00\x00\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:48:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:48:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x9}}}}, 0xf8}}, 0x0) 10:48:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0xa}}}}, 0xf8}}, 0x0) 10:48:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xe2101550a8583f7}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r1, 0x6, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0xfffffffa, 0x18}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:48:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0xe}}}}, 0xf8}}, 0x0) 10:48:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0xf}}}}, 0xf8}}, 0x0) 10:48:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000500)) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100000, 0x0) read$eventfd(r1, &(0x7f0000000180), 0x8) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x40, 0xe3, 0x0, 0x0, 0x8, 0x6, 0x6, 0x3, 0xe0, 0x1, 0xca, 0x5, 0x0, 0xfffffe00, 0x10000, 0x0, 0x7f, 0x8, 0x9, [], 0x6, 0x2}) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:48:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:48:05 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x7) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000500)) r2 = socket$rds(0x15, 0x5, 0x0) fstat(r2, &(0x7f0000000100)) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '\x00'}) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:48:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x32a, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) 10:48:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@can_newroute={0x14, 0x18, 0x7c02fdfad0c848e5}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r4, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x50a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') r6 = syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000500)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB="01000000000003000000010000002c0008802800008024800100000000000000000010bcc3fcf2e500"/62, @ANYRESHEX=r6, @ANYRESDEC=r6], 0x6c}}, 0x2044055) [ 821.045586][ T29] audit: type=1800 audit(1593082085.913:1080): pid=29609 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:48:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x60}}}}, 0xf8}}, 0x0) 10:48:06 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061f00052406000005240000000d235c43e0fc037b91000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e0901a607d90ecb7e392a090581030004"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0)=0x7, 0x4) syz_usb_ep_write(r0, 0x0, 0x16, &(0x7f0000000080)="539732b41a3e9999fedbf192cc40a54a7a94b34f3026") [ 821.101053][ T29] audit: type=1800 audit(1593082085.973:1081): pid=29615 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:48:06 executing program 5: r0 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r0, 0xffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x7) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) 10:48:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x800}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 10:48:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x40, 0x10000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(0x0) 10:48:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0xf0}}}}, 0xf8}}, 0x0) [ 821.304904][ T29] audit: type=1800 audit(1593082086.173:1082): pid=29623 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 [ 821.355756][ T29] audit: type=1800 audit(1593082086.203:1083): pid=29623 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15755 res=0 10:48:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x300}}}}, 0xf8}}, 0x0) [ 821.476143][T29101] usb 3-1: new high-speed USB device number 15 using dummy_hcd 10:48:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x777}}}}, 0xf8}}, 0x0) [ 821.746555][T29101] usb 3-1: Using ep0 maxpacket: 8 10:48:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000800cd00000000000000000000336f09c7f4bb3d05cb1eeb1df9b7e8b1142850d7005a3917cb32e89689d6d4580c10078b570c7a6e0200000000000000d27a6e4f0c8cd7ba0790cd82dc119ba8a5877a6078513dffffffff00000000000000000000000000000a969ce3a855316e42496fbe4ec464fce0a41d6caaa9bb9ca76d432842bdc9119d8510"]) 10:48:06 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000400)={r3, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000000c0)={r3, 0x8}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001e9a13e60a7ea95e3ad1cc74066222962dc6d86078e859dab59e7d03049cbe923461f5ea2e72c5e30032b17c1e13dda8b185047f03000000000000009929c0b402e43fa82703e7d2098967436cab4fe7", @ANYRES16=r4, @ANYBLOB="020029bd7000fcdbdf250d0000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) 10:48:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0x900}}}}, 0xf8}}, 0x0) 10:48:06 executing program 5: ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0x200000cb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0x3f, "fc221f5047640b5159d79f2764dd5b87524385d3ef269b46be3332e85140271e26020880aa94aa07f90da5fb4099fdf73d520c4995052d4e5778fbf8100323ce"}) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x9, 0x80022) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000400)={r3, 0x2}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={r3, 0x1}) [ 821.866393][T29101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.906560][T29101] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.924168][ T29] audit: type=1800 audit(1593082086.793:1084): pid=29652 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 10:48:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@multicast2, {0xa00}}}}, 0xf8}}, 0x0) [ 821.983313][T29101] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 822.056025][T29101] usb 3-1: config 1 interface 0 has no altsetting 0 [ 822.216419][T29101] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 822.225567][T29101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.265135][T29101] usb 3-1: Product: syz [ 822.272158][T29101] usb 3-1: Manufacturer: syz [ 822.286192][T29101] usb 3-1: SerialNumber: syz [ 822.546394][ C0] ================================================================== [ 822.555181][ C0] BUG: KASAN: slab-out-of-bounds in snd_usb_mixer_notify_id+0x219/0x2a0 [ 822.563734][ C0] Write of size 4 at addr ffff888091c93860 by task systemd-udevd/29676 [ 822.571962][ C0] [ 822.574570][ C0] CPU: 0 PID: 29676 Comm: systemd-udevd Not tainted 5.7.0-syzkaller #0 [ 822.582895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.592972][ C0] Call Trace: [ 822.596251][ C0] [ 822.599107][ C0] dump_stack+0x188/0x20d [ 822.603467][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 822.609115][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 822.614816][ C0] print_address_description.constprop.0.cold+0xd3/0x413 [ 822.621943][ C0] ? vprintk_func+0x97/0x1a6 [ 822.626734][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 822.632620][ C0] kasan_report.cold+0x1f/0x37 [ 822.637404][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 822.643071][ C0] snd_usb_mixer_notify_id+0x219/0x2a0 [ 822.648538][ C0] snd_usb_mixer_interrupt+0x416/0x980 [ 822.654088][ C0] ? kcov_remote_softirq_start+0x11/0x90 [ 822.659806][ C0] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 822.665282][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 822.670564][ C0] dummy_timer+0x1243/0x2fe1 [ 822.675200][ C0] ? __lock_acquire+0x2224/0x48a0 [ 822.680352][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 822.685909][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 822.690676][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 822.696445][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 822.702882][ C0] call_timer_fn+0x1ac/0x780 [ 822.707533][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 822.712321][ C0] ? timer_fixup_init+0x60/0x60 [ 822.717185][ C0] ? lock_downgrade+0x840/0x840 [ 822.722173][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 822.727378][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 822.733515][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 822.738281][ C0] run_timer_softirq+0x623/0x1600 [ 822.743340][ C0] ? add_timer+0x830/0x830 [ 822.747800][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 822.753269][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 822.758815][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 822.764791][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 822.770772][ C0] __do_softirq+0x26c/0x9f7 [ 822.775285][ C0] irq_exit+0x192/0x1d0 [ 822.779458][ C0] smp_apic_timer_interrupt+0x19e/0x600 [ 822.785614][ C0] apic_timer_interrupt+0xf/0x20 [ 822.790539][ C0] [ 822.793955][ C0] RIP: 0010:tomoyo_check_acl+0x2d9/0x3e0 [ 822.799606][ C0] Code: 44 89 7c 24 16 e8 47 d0 11 fe 0f b6 74 24 15 40 84 f6 75 57 e8 d8 ce 11 fe 48 83 c3 01 44 89 fe bf ff 00 00 00 e8 47 d0 11 fe <66> 81 fb ff 00 76 a0 e8 bb ce 11 fe 49 8d 7d 49 48 b8 00 00 00 00 [ 822.819331][ C0] RSP: 0018:ffffc90004df7a78 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 822.827756][ C0] RAX: 0000000000000000 RBX: 0000000000000075 RCX: ffffffff8361fff9 [ 822.835735][ C0] RDX: 0000000000000075 RSI: 00000000000000ff RDI: 0000000000000003 [ 822.843716][ C0] RBP: dffffc0000000000 R08: ffff888023c02200 R09: ffffed1014c85fd8 [ 822.851686][ C0] R10: ffff8880a642febf R11: ffffed1014c85fd7 R12: ffff8880a642feb0 [ 822.859653][ C0] R13: ffffc90004df7ba0 R14: 0000000000000002 R15: 0000000000000075 [ 822.867788][ C0] ? tomoyo_check_acl+0x2d9/0x3e0 [ 822.872827][ C0] ? tomoyo_check_acl+0x2d9/0x3e0 [ 822.877880][ C0] ? tomoyo_compare_name_union+0xe0/0xe0 [ 822.883702][ C0] tomoyo_path_permission+0x1f0/0x360 [ 822.889229][ C0] tomoyo_path_perm+0x2f6/0x400 [ 822.894115][ C0] ? tomoyo_check_open_permission+0x370/0x370 [ 822.900328][ C0] ? lock_downgrade+0x840/0x840 [ 822.905230][ C0] ? get_nth_filter.part.0+0x2d0/0x2d0 [ 822.910692][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 822.916676][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 822.922687][ C0] security_inode_getattr+0xeb/0x150 [ 822.927982][ C0] vfs_getattr+0x22/0x60 [ 822.932257][ C0] vfs_statx_fd+0x6a/0xb0 [ 822.936585][ C0] __do_sys_newfstat+0x88/0x100 [ 822.941453][ C0] ? __do_sys_newfstatat+0x120/0x120 [ 822.946894][ C0] ? __secure_computing+0x104/0x360 [ 822.952254][ C0] ? syscall_trace_enter+0x41d/0xd10 [ 822.957554][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 822.963153][ C0] ? do_sys_open+0xc3/0x140 [ 822.967707][ C0] ? do_syscall_64+0x21/0x7d0 [ 822.972404][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 822.978397][ C0] do_syscall_64+0xf6/0x7d0 [ 822.982906][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 822.988833][ C0] RIP: 0033:0x7fa339b482e2 [ 822.993366][ C0] Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7 [ 823.015581][ C0] RSP: 002b:00007ffd8beba488 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 823.024008][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa339b482e2 [ 823.032000][ C0] RDX: 00007ffd8beba4a0 RSI: 00007ffd8beba4a0 RDI: 0000000000000007 [ 823.040160][ C0] RBP: 00007ffd8beba650 R08: 0000000000000000 R09: 0000000000000001 [ 823.048127][ C0] R10: 0000000000080000 R11: 0000000000000246 R12: 000055edf5159c40 [ 823.056188][ C0] R13: 00007ffd8beba690 R14: 000055edf5148580 R15: 00007ffd8beba610 [ 823.064189][ C0] [ 823.066517][ C0] Allocated by task 29101: [ 823.070981][ C0] save_stack+0x1b/0x40 [ 823.075142][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 823.080903][ C0] kmem_cache_alloc_trace+0x153/0x7d0 [ 823.086481][ C0] add_single_ctl_with_resume+0x53/0x1d0 [ 823.092110][ C0] snd_usb_mixer_apply_create_quirk+0x17ac/0x2000 [ 823.098522][ C0] snd_usb_create_mixer+0x7de/0x18c0 [ 823.103879][ C0] create_standard_mixer_quirk+0x57/0x70 [ 823.109655][ C0] snd_usb_create_quirk+0x9f/0xd0 [ 823.115266][ C0] create_composite_quirk+0x1d5/0x420 [ 823.122593][ C0] snd_usb_create_quirk+0x9f/0xd0 [ 823.127817][ C0] usb_audio_probe+0x57a/0x2240 [ 823.133199][ C0] usb_probe_interface+0x305/0x7a0 [ 823.139413][ C0] really_probe+0x281/0x6d0 [ 823.144344][ C0] driver_probe_device+0x104/0x210 [ 823.149628][ C0] __device_attach_driver+0x1c2/0x220 [ 823.154999][ C0] bus_for_each_drv+0x162/0x1e0 [ 823.159848][ C0] __device_attach+0x21a/0x360 [ 823.164609][ C0] bus_probe_device+0x1e4/0x290 [ 823.169453][ C0] device_add+0x132d/0x1c10 [ 823.174244][ C0] usb_set_configuration+0xec5/0x1740 [ 823.179785][ C0] usb_generic_driver_probe+0x9d/0xe0 [ 823.185163][ C0] usb_probe_device+0xc6/0x1f0 [ 823.190262][ C0] really_probe+0x281/0x6d0 [ 823.194764][ C0] driver_probe_device+0x104/0x210 [ 823.199899][ C0] __device_attach_driver+0x1c2/0x220 [ 823.205384][ C0] bus_for_each_drv+0x162/0x1e0 [ 823.210315][ C0] __device_attach+0x21a/0x360 [ 823.216959][ C0] bus_probe_device+0x1e4/0x290 [ 823.221814][ C0] device_add+0x132d/0x1c10 [ 823.226324][ C0] usb_new_device.cold+0x753/0x103d [ 823.231550][ C0] hub_event+0x1eca/0x38f0 [ 823.236154][ C0] process_one_work+0x965/0x16a0 [ 823.241106][ C0] worker_thread+0x96/0xe20 [ 823.245619][ C0] kthread+0x388/0x470 [ 823.249829][ C0] ret_from_fork+0x24/0x30 [ 823.255382][ C0] [ 823.257893][ C0] Freed by task 29313: [ 823.262159][ C0] save_stack+0x1b/0x40 [ 823.266310][ C0] __kasan_slab_free+0xf7/0x140 [ 823.272171][ C0] kfree+0x109/0x2b0 [ 823.276081][ C0] tomoyo_check_open_permission+0x169/0x370 [ 823.281987][ C0] tomoyo_file_open+0xa3/0xd0 [ 823.286679][ C0] security_file_open+0x6e/0x410 [ 823.291606][ C0] do_dentry_open+0x3e9/0x1340 [ 823.296373][ C0] path_openat+0x1e59/0x27d0 [ 823.300953][ C0] do_filp_open+0x192/0x260 [ 823.305449][ C0] do_sys_openat2+0x585/0x7d0 [ 823.310318][ C0] do_sys_open+0xc3/0x140 [ 823.314678][ C0] do_syscall_64+0xf6/0x7d0 [ 823.319190][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 823.325066][ C0] [ 823.327392][ C0] The buggy address belongs to the object at ffff888091c93800 [ 823.327392][ C0] which belongs to the cache kmalloc-64 of size 64 [ 823.341264][ C0] The buggy address is located 32 bytes to the right of [ 823.341264][ C0] 64-byte region [ffff888091c93800, ffff888091c93840) [ 823.355065][ C0] The buggy address belongs to the page: [ 823.360785][ C0] page:ffffea00024724c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 823.369901][ C0] flags: 0xfffe0000000200(slab) [ 823.374788][ C0] raw: 00fffe0000000200 ffffea000277da88 ffffea0002830148 ffff8880aa000380 [ 823.383532][ C0] raw: 0000000000000000 ffff888091c93000 0000000100000020 0000000000000000 [ 823.392211][ C0] page dumped because: kasan: bad access detected [ 823.398615][ C0] [ 823.401156][ C0] Memory state around the buggy address: [ 823.406792][ C0] ffff888091c93700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 823.414861][ C0] ffff888091c93780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 823.422925][ C0] >ffff888091c93800: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 823.430989][ C0] ^ [ 823.438178][ C0] ffff888091c93880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 823.446416][ C0] ffff888091c93900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 823.454464][ C0] ================================================================== [ 823.462527][ C0] Disabling lock debugging due to kernel taint [ 823.468878][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 823.475502][ C0] CPU: 0 PID: 29676 Comm: systemd-udevd Tainted: G B 5.7.0-syzkaller #0 [ 823.485402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.495529][ C0] Call Trace: [ 823.498799][ C0] [ 823.501644][ C0] dump_stack+0x188/0x20d [ 823.505965][ C0] ? snd_usb_mixer_notify_id+0x1a0/0x2a0 [ 823.511660][ C0] panic+0x2e3/0x75c [ 823.515543][ C0] ? add_taint.cold+0x16/0x16 [ 823.520234][ C0] ? trace_hardirqs_off+0x50/0x220 [ 823.525336][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 823.530964][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 823.536579][ C0] end_report+0x4d/0x53 [ 823.540753][ C0] kasan_report.cold+0xd/0x37 [ 823.545472][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0 [ 823.551092][ C0] snd_usb_mixer_notify_id+0x219/0x2a0 [ 823.556544][ C0] snd_usb_mixer_interrupt+0x416/0x980 [ 823.562002][ C0] ? kcov_remote_softirq_start+0x11/0x90 [ 823.567635][ C0] __usb_hcd_giveback_urb+0x2af/0x4b0 [ 823.573433][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 823.578883][ C0] dummy_timer+0x1243/0x2fe1 [ 823.583479][ C0] ? __lock_acquire+0x2224/0x48a0 [ 823.588515][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 823.593967][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 823.598722][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 823.604258][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 823.610251][ C0] call_timer_fn+0x1ac/0x780 [ 823.614851][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 823.619625][ C0] ? timer_fixup_init+0x60/0x60 [ 823.624465][ C0] ? lock_downgrade+0x840/0x840 [ 823.629318][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 823.634502][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 823.640469][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 823.645244][ C0] run_timer_softirq+0x623/0x1600 [ 823.650277][ C0] ? add_timer+0x830/0x830 [ 823.654684][ C0] ? debug_smp_processor_id+0x2f/0x185 [ 823.660139][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 823.665679][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 823.671775][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x590 [ 823.677753][ C0] __do_softirq+0x26c/0x9f7 [ 823.682252][ C0] irq_exit+0x192/0x1d0 [ 823.686408][ C0] smp_apic_timer_interrupt+0x19e/0x600 [ 823.691996][ C0] apic_timer_interrupt+0xf/0x20 [ 823.696953][ C0] [ 823.699884][ C0] RIP: 0010:tomoyo_check_acl+0x2d9/0x3e0 [ 823.705502][ C0] Code: 44 89 7c 24 16 e8 47 d0 11 fe 0f b6 74 24 15 40 84 f6 75 57 e8 d8 ce 11 fe 48 83 c3 01 44 89 fe bf ff 00 00 00 e8 47 d0 11 fe <66> 81 fb ff 00 76 a0 e8 bb ce 11 fe 49 8d 7d 49 48 b8 00 00 00 00 [ 823.725146][ C0] RSP: 0018:ffffc90004df7a78 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 823.733572][ C0] RAX: 0000000000000000 RBX: 0000000000000075 RCX: ffffffff8361fff9 [ 823.741974][ C0] RDX: 0000000000000075 RSI: 00000000000000ff RDI: 0000000000000003 [ 823.750018][ C0] RBP: dffffc0000000000 R08: ffff888023c02200 R09: ffffed1014c85fd8 [ 823.757997][ C0] R10: ffff8880a642febf R11: ffffed1014c85fd7 R12: ffff8880a642feb0 [ 823.765960][ C0] R13: ffffc90004df7ba0 R14: 0000000000000002 R15: 0000000000000075 [ 823.773945][ C0] ? tomoyo_check_acl+0x2d9/0x3e0 [ 823.779012][ C0] ? tomoyo_check_acl+0x2d9/0x3e0 [ 823.784023][ C0] ? tomoyo_compare_name_union+0xe0/0xe0 [ 823.789664][ C0] tomoyo_path_permission+0x1f0/0x360 [ 823.795025][ C0] tomoyo_path_perm+0x2f6/0x400 [ 823.799885][ C0] ? tomoyo_check_open_permission+0x370/0x370 [ 823.805961][ C0] ? lock_downgrade+0x840/0x840 [ 823.810919][ C0] ? get_nth_filter.part.0+0x2d0/0x2d0 [ 823.816365][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 823.822356][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 823.828346][ C0] security_inode_getattr+0xeb/0x150 [ 823.833633][ C0] vfs_getattr+0x22/0x60 [ 823.837869][ C0] vfs_statx_fd+0x6a/0xb0 [ 823.842197][ C0] __do_sys_newfstat+0x88/0x100 [ 823.847051][ C0] ? __do_sys_newfstatat+0x120/0x120 [ 823.852336][ C0] ? __secure_computing+0x104/0x360 [ 823.857524][ C0] ? syscall_trace_enter+0x41d/0xd10 [ 823.862821][ C0] ? syscall_slow_exit_work+0x630/0x630 [ 823.868356][ C0] ? do_sys_open+0xc3/0x140 [ 823.872874][ C0] ? do_syscall_64+0x21/0x7d0 [ 823.877590][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 823.883568][ C0] do_syscall_64+0xf6/0x7d0 [ 823.888105][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 823.893985][ C0] RIP: 0033:0x7fa339b482e2 [ 823.898523][ C0] Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7 [ 823.918126][ C0] RSP: 002b:00007ffd8beba488 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 823.926605][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa339b482e2 [ 823.934684][ C0] RDX: 00007ffd8beba4a0 RSI: 00007ffd8beba4a0 RDI: 0000000000000007 [ 823.942643][ C0] RBP: 00007ffd8beba650 R08: 0000000000000000 R09: 0000000000000001 [ 823.950616][ C0] R10: 0000000000080000 R11: 0000000000000246 R12: 000055edf5159c40 [ 823.958573][ C0] R13: 00007ffd8beba690 R14: 000055edf5148580 R15: 00007ffd8beba610 [ 823.968033][ C0] Kernel Offset: disabled [ 823.972364][ C0] Rebooting in 86400 seconds..